CVE-2012-5992

2022-10-0316:15:30

cisco

raw.githubusercontent.com

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.5%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283.