CVE-2013-1247
Cisco Prime Infrastructure - Stored Cross-Site Scripting via Wireless SSID in XML Windowing Table
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the wireless configuration module in Cisco Prime Infrastructure allows remote attackers to inject arbitrary web script or HTML via an SSID that is not properly handled during display of the XML windowing table, aka Bug ID CSCuf04356.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1247
Scores
EPSS
0.0152
EPSS Percentile
72.0%
Details
CWE
CWE-79
Status
published
Products (1)
cisco/prime_infrastructure
Published
May 31, 2013
Tracked Since
Feb 18, 2026