CVE-2017-3839

4.3 mediumEPSS 1.6%

Medium (4.3) in cisco secure access control system. EPSS 1.6% chance of exploitation in the next 30 days.

An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases: 5.8(2.5).

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2017-02-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:secure_access_control_system

References

http://www.securityfocus.com/bid/96236
http://www.securitytracker.com/id/1037836
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs1
http://www.securityfocus.com/bid/96236
http://www.securitytracker.com/id/1037836

Check your stack JSON