Published: 21/04/2006 Updated: 18/10/2018

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

VMScore: 585

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Subscribe to Wireless Lan Solution Engine

Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express prior to 2.13 allows remote malicious users to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco wireless lan solution engine 2.0
cisco wireless lan solution engine 2.1
cisco wireless lan solution engine 2.10
cisco wireless lan solution engine 2.13
cisco wireless lan solution engine 2.2
cisco wireless lan solution engine 2.5
cisco wireless lan solution engine 2.6
cisco wireless lan solution engine 2.11
cisco wireless lan solution engine 2.12
cisco wireless lan solution engine 2.3
cisco wireless lan solution engine 2.4
cisco wireless lan solution engine 2.7
cisco wireless lan solution engine 2.8
cisco wireless lan solution engine 2.9

There are two vulnerabilities that exist in the CiscoWorks Wireless LAN Solution Engine (WLSE) The first is a cross site scripting (XSS) vulnerability that may allow an attacker to gain administrative privileges on the system The second is a local privilege escalation vulnerability that can be used by an attacker who already has authentic ...

source: wwwsecurityfocuscom/bid/17604/info CiscoWorks Wireless LAN Solution Engine (WLSE) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affe ...

NVD-CWE-Other http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml http://securitytracker.com/id?1015965 http://secunia.com/advisories/19736 http://www.assurance.com.au/advisories/200604-cisco.txt http://www.securityfocus.com/bid/17604 http://www.osvdb.org/24812 http://www.vupen.com/english/advisories/2006/1434 https://exchange.xforce.ibmcloud.com/vulnerabilities/25883 http://www.securityfocus.com/archive/1/431371/30/5490/threaded http://www.securityfocus.com/archive/1/431367/30/5490/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27684/http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20060419-wlse

CVE-2006-1960

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect