{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:31:43Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20040825-acs","slug":"cisco-sa-20040825-acs","vendor":"Cisco","title":"Multiple Vulnerabilities in Cisco Secure Access Control Server","summary":"Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) provide authentication, authorization, and accounting (AAA) services to network devices such as a network access server, Cisco PIX and a router. This advisory documents multiple Denial of Service (DoS) and authentication related vulnerabilities for the ACS Windows and the ACS Solution Engine servers. The vulnerabilities are documented as these Cisco bug IDs: CSCeb60017 ( registered customers only) CSCec66913 ( registered customers only) CSCec90317 ( registered customers only) CSCed81716 ( registered customers only) CSCef05950 ( registered customers only) This advisory will be posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs.","severity":"NA","published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20040825-acs/csaf/cisco-sa-20040825-acs.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":4,"visible_product_count":2,"public_evidence_count":8,"kev_count":0,"highest_epss":0.01798},"cves":[{"id":"CVE-2004-1458","kev":false,"epss":{"score":0.01798,"percentile":0.76065,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2004-1459","kev":false,"epss":{"score":0.01757,"percentile":0.75492,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2004-1461","kev":false,"epss":{"score":0.01679,"percentile":0.74369,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2004-1460","kev":false,"epss":{"score":0.01572,"percentile":0.72689,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Secure Access Control Server (ACS) for Windows","slug":"cisco-secure-access-control-server-acs-for-windows","vendor":"Cisco"},"cve":{"id":"CVE-2004-1458"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server (ACS) for Windows","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01798,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","advisory_updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","row_display_order":1},{"product":{"name":"Cisco Secure Access Control Server Solution Engine (ACSE)","slug":"cisco-secure-access-control-server-solution-engine-acse","vendor":"Cisco"},"cve":{"id":"CVE-2004-1458"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server Solution Engine (ACSE)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01798,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","advisory_updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","row_display_order":2},{"product":{"name":"Cisco Secure Access Control Server (ACS) for Windows","slug":"cisco-secure-access-control-server-acs-for-windows","vendor":"Cisco"},"cve":{"id":"CVE-2004-1459"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server (ACS) for Windows","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01757,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","advisory_updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","row_display_order":3},{"product":{"name":"Cisco Secure Access Control Server Solution Engine (ACSE)","slug":"cisco-secure-access-control-server-solution-engine-acse","vendor":"Cisco"},"cve":{"id":"CVE-2004-1459"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server Solution Engine (ACSE)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01757,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","advisory_updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","row_display_order":4},{"product":{"name":"Cisco Secure Access Control Server (ACS) for Windows","slug":"cisco-secure-access-control-server-acs-for-windows","vendor":"Cisco"},"cve":{"id":"CVE-2004-1461"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server (ACS) for Windows","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01679,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","advisory_updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","row_display_order":5},{"product":{"name":"Cisco Secure Access Control Server Solution Engine (ACSE)","slug":"cisco-secure-access-control-server-solution-engine-acse","vendor":"Cisco"},"cve":{"id":"CVE-2004-1461"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server Solution Engine (ACSE)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01679,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","advisory_updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","row_display_order":6},{"product":{"name":"Cisco Secure Access Control Server (ACS) for Windows","slug":"cisco-secure-access-control-server-acs-for-windows","vendor":"Cisco"},"cve":{"id":"CVE-2004-1460"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server (ACS) for Windows","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01572,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","advisory_updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","row_display_order":7},{"product":{"name":"Cisco Secure Access Control Server Solution Engine (ACSE)","slug":"cisco-secure-access-control-server-solution-engine-acse","vendor":"Cisco"},"cve":{"id":"CVE-2004-1460"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:34:55Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control Server Solution Engine (ACSE)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01572,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-25T16:00:00Z","updated_at":"2004-08-25T16:00:00Z","advisory_updated_at":"2004-08-25T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040825-acs","row_display_order":8}]}