CVE-2010-2986: XSS
Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, aka Bug ID CSCtf14288.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2986?
CVE-2010-2986 is classified as a medium severity vulnerability due to its potential to allow remote attackers to execute arbitrary scripts.
How do I fix CVE-2010-2986?
To fix CVE-2010-2986, upgrade to versions 6.0(194.0) or 7.0.164 or later of the Cisco Wireless Control System Software.
Which versions of Cisco Wireless Control System Software are affected by CVE-2010-2986?
CVE-2010-2986 affects multiple versions including 4.0.155.5, 4.1.x, 4.2.x, 5.0.x, 5.1.x, 5.2.x, and 6.0 up to and including 6.0(188.0).
What type of vulnerability is CVE-2010-2986?
CVE-2010-2986 is a Cross-site Scripting (XSS) vulnerability related to the search feature in the web interface of Cisco Wireless Control System.
Can CVE-2010-2986 affect web applications?
Yes, CVE-2010-2986 can affect web applications by allowing attackers to inject malicious web scripts or HTML via the search text parameter.