XSS in Cisco Unified Wireless Network Solution Software

CVE-2010-2988

Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtf35333.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (55.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_wireless_network_solution_software — versions 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)