VulnerabilityModified
CVE-2012-5990
Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka…
MEDIUM 4.3EPSS 1.53%
Does this matter?
Lower severity and a low EPSS score (1.53%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud18375.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.53% probability · 73th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- cisco/prime network control system · cisco/wireless control system
- Source
- psirt@cisco.com
References
- http://www.kb.cert.org/vuls/id/830316US Government Resource
- http://www.kb.cert.org/vuls/id/830316US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.