CVE-2012-6007

2012-12-1911:56:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-6007

cisco

wlc

xss

vulnerability

web script

html

5.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

53.7%

JSON

Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than CVE-2012-5992.

CPENameOperatorVersion
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.2.110.0
cisco:2000_wireless_lan_controllercisco 2000 wireless lan controllereq*
cisco:2100_wireless_lan_controllercisco 2100 wireless lan controllereq*
cisco:2500_wireless_lan_controllercisco 2500 wireless lan controllereq-
cisco:4100_wireless_lan_controllercisco 4100 wireless lan controllereq*
cisco:4400_wireless_lan_controllercisco 4400 wireless lan controllereq*
cisco:5500_wireless_lan_controllercisco 5500 wireless lan controllereq-
cisco:7500_wireless_lan_controllercisco 7500 wireless lan controllereq-
cisco:8500_wireless_lan_controllercisco 8500 wireless lan controllereq-

CPE	Name	Operator	Version
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.2.110.0
cisco:2000_wireless_lan_controller	cisco 2000 wireless lan controller	eq	*
cisco:2100_wireless_lan_controller	cisco 2100 wireless lan controller	eq	*
cisco:2500_wireless_lan_controller	cisco 2500 wireless lan controller	eq	-
cisco:4100_wireless_lan_controller	cisco 4100 wireless lan controller	eq	*
cisco:4400_wireless_lan_controller	cisco 4400 wireless lan controller	eq	*
cisco:5500_wireless_lan_controller	cisco 5500 wireless lan controller	eq	-
cisco:7500_wireless_lan_controller	cisco 7500 wireless lan controller	eq	-
cisco:8500_wireless_lan_controller	cisco 8500 wireless lan controller	eq	-