CVE-2010-2986

no score yetEPSS 1.1%

Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, aka Bug ID CSCtf14288.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2010-08-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:wireless_control_system_software

References

http://secunia.com/advisories/40827
http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
http://www.securityfocus.com/archive/1/512878/100/0/threaded
http://www.securityfocus.com/bid/42216
http://www.tomneaves.com/Cisco_Wireless_Control_System_XSS.txt

Check your stack JSON