CVE-2006-3289

Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL".

Data: Cisco advisories 1 day ago · Cisco CSAF 4 hours ago · NVD CVEs 7 hours ago · NVD CPEs 1 day ago · CISA KEV 1 day ago · EPSS 1 day ago

Severity	LOW
CVSS	2.6
EPSS	-
CWE	NVD-CWE-Other
KEV
Published	19 years ago
Modified	1 month ago

Products with public affected evidence

Product	Advisory	Affected evidence
Cisco Wireless Control System (WCS) Software	cisco-sa-20060628-wcs	structured affected CSAF product_status