CVE-2010-2986 Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allow...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, aka Bug ID CSCtf14288.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless control system software | <= 6.0.188.0 | No fix listed |
| cisco wireless control system software | = 3.2.78.0 | No fix listed |
| cisco wireless control system software | = 4.0.155.5 | No fix listed |
| cisco wireless control system software | = 4.1 | No fix listed |
| cisco wireless control system software | = 4.1.83.0 | No fix listed |
| cisco wireless control system software | = 4.1.91.0 | No fix listed |
| cisco wireless control system software | = 4.1.171.0 | No fix listed |
| cisco wireless control system software | = 4.1.191.xm | No fix listed |
| cisco wireless control system software | = 4.1.192.35m | No fix listed |
| cisco wireless control system software | = 4.1.192.xm | No fix listed |
| cisco wireless control system software | = 4.2.62.0 | No fix listed |
| cisco wireless control system software | = 4.2.62.11 | No fix listed |
| cisco wireless control system software | = 4.2.81.0 | No fix listed |
| cisco wireless control system software | = 4.2.97.0 | No fix listed |
| cisco wireless control system software | = 4.2.110.0 | No fix listed |
| cisco wireless control system software | = 4.2.128.0 | No fix listed |
| cisco wireless control system software | = 4.2.130.0 | No fix listed |
| cisco wireless control system software | = 4.2.173.0 | No fix listed |
| cisco wireless control system software | = 4.2.176.0 | No fix listed |
| cisco wireless control system software | = 4.2.209.0 | No fix listed |
| cisco wireless control system software | = 5.0.56.0 | No fix listed |
| cisco wireless control system software | = 5.0.56.2 | No fix listed |
| cisco wireless control system software | = 5.0.148.0 | No fix listed |
| cisco wireless control system software | = 5.1.64.0 | No fix listed |
| cisco wireless control system software | = 5.1.65.4 | No fix listed |
Show 13 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless control system software | = 5.1.151.0 | No fix listed |
| cisco wireless control system software | = 5.2.110.0 | No fix listed |
| cisco wireless control system software | = 5.2.125.0 | No fix listed |
| cisco wireless control system software | = 5.2.130.0 | No fix listed |
| cisco wireless control system software | = 5.2.148.0 | No fix listed |
| cisco wireless control system software | = 5.2.157.0 | No fix listed |
| cisco wireless control system software | = 6.0 | No fix listed |
| cisco wireless control system software | = 6.0.132.0 | No fix listed |
| cisco wireless control system software | = 6.0.170.0 | No fix listed |
| cisco wireless control system software | = 6.0.181.0 | No fix listed |
| cisco wireless control system software | = 6.0.182.0 | No fix listed |
| cisco wireless control system software | = 7.0 | No fix listed |
| cisco wireless control system software | = 7.0.98.0 | No fix listed |
References
- 40827 third-party-advisory vendor-advisory
- www.cisco.com
- 20100804 Cisco Wireless Control System XSS mailing-list
- 42216 vdb-entry
- www.tomneaves.com exploit