CVE-2015-0729

Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005.

• CWE-79

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38864Vendor Advisory
• http://www.securitytracker.com/id/1032338Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38864Vendor Advisory
• http://www.securitytracker.com/id/1032338Third Party Advisory, VDB Entry

Published

May 16, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0723The wireless web-authentication subsystem on Cisco Wireless …
• CVE-2015-0724Multiple cross-site scripting (XSS) vulnerabilities in dncs …
• CVE-2015-0725Cisco Videoscape Distribution Suite Service Broker (aka VDS-…
• CVE-2015-0726The web administration interface on Cisco Wireless LAN Contr…
• CVE-2015-0727Cross-site scripting (XSS) vulnerability in the HTTP module …
• CVE-2015-0728Cross-site scripting (XSS) vulnerability in Cisco Access Con…
• CVE-2015-0730The SMB module in Cisco Wide Area Application Services (WAAS…
• CVE-2015-0731The ISDN implementation in Cisco IOS 15.3S allows remote att…
• CVE-2015-0732Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on…
• CVE-2015-0733CRLF injection vulnerability in the HTTP Header Handler in D…
• CVE-2015-0734Multiple cross-site scripting (XSS) vulnerabilities on the C…
• CVE-2015-0735Cross-site request forgery (CSRF) vulnerability in Cisco Uni…