CVE-2012-5990

EPSS 0.25%
Published 06.09.2013 11:15:35
Last modified 11.04.2025 00:51:21
Source psirt@cisco.com
Teams watchlist Login
Open Login

Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud18375.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Prime Network Control System Version-

Cisco ≫ Wireless Control System

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.25%	0.453

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.kb.cert.org/vuls/id/830316

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2012-5990

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-5990

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-5990

EUVD