CVE-2010-2986

Cisco Wireless Control System Software < 6.0.188.0 - Cross-Site Scripting via QuickSearchAction.do searchText Parameter

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, aka Bug ID CSCtf14288.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/42216
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/512878/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40827

Scores

EPSS 0.0111
EPSS Percentile 62.4%

Details

CWE
CWE-79
Status published
Products (38)
cisco/wireless_control_system_software 3.2.78.0
cisco/wireless_control_system_software 4.0.155.5
cisco/wireless_control_system_software 4.1
cisco/wireless_control_system_software 4.1.83.0
cisco/wireless_control_system_software 4.1.91.0
cisco/wireless_control_system_software 4.1.171.0
cisco/wireless_control_system_software 4.1.191.xm
cisco/wireless_control_system_software 4.1.192.35m
cisco/wireless_control_system_software 4.1.192.xm
cisco/wireless_control_system_software 4.2.62.0
... and 28 more
Published Aug 10, 2010
Tracked Since Feb 18, 2026