{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:16:21Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20020403-acs-win-web","slug":"cisco-sa-20020403-acs-win-web","vendor":"Cisco","title":"Web Interface Vulnerabilities in Cisco Secure ACS for Windows","summary":"Cisco Secure Access Control Server (ACS) for Windows contains two vulnerabilities. One vulnerability can lead to the execution of an arbitrary code on an ACS server, and the second can lead to an unauthorized disclosure of information. A patch is available for both vulnerabilities. Cisco Secure ACS for Unix is not vulnerable. No other Cisco product is vulnerable. There is no direct workaround for the vulnerabilities, but it is possible to mitigate them to a great extent. See the Workarounds section for details. This advisory is available at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020403-acs-win-web.","severity":"NA","published_at":"2002-04-03T16:00:00Z","updated_at":"2002-04-03T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020403-acs-win-web","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20020403-acs-win-web/csaf/cisco-sa-20020403-acs-win-web.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":2,"visible_product_count":1,"public_evidence_count":2,"kev_count":0},"cves":[{"id":"CVE-2002-0160","kev":false},{"id":"CVE-2002-0159","kev":false}],"public_evidence":[{"product":{"name":"Cisco Secure Access Control Server (ACS) for Windows 2000/ NT","slug":"cisco-secure-access-control-server-acs-for-windows-2000-nt","vendor":"Cisco"},"cve":{"id":"CVE-2002-0160"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server (ACS) for Windows 2000/ NT","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2002-04-03T16:00:00Z","updated_at":"2002-04-03T16:00:00Z","advisory_updated_at":"2002-04-03T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020403-acs-win-web","row_display_order":1},{"product":{"name":"Cisco Secure Access Control Server (ACS) for Windows 2000/ NT","slug":"cisco-secure-access-control-server-acs-for-windows-2000-nt","vendor":"Cisco"},"cve":{"id":"CVE-2002-0159"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server (ACS) for Windows 2000/ NT","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2002-04-03T16:00:00Z","updated_at":"2002-04-03T16:00:00Z","advisory_updated_at":"2002-04-03T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20020403-acs-win-web","row_display_order":2}]}