CVE-2013-6698

Cisco Wireless LAN Controller - Cross-Frame Scripting via IFRAME Element

Title source: llm

Description

The web interface on Cisco Wireless LAN Controller (WLC) devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuf77821.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6698

Scores

EPSS 0.0081

EPSS Percentile 53.0%

Details

CWE

CWE-264

Status published

Products (1)

cisco/wireless_lan_controller

Published Nov 22, 2013

Tracked Since Feb 18, 2026