XSS in Cisco Unified Wireless Network Solution Software
CVE-2010-2987
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtg33854.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.008 (55.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_wireless_network_solution_software — versions 7.0, 7.0.98.0
- Cisco Wireless_control_system_software — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)