CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-1960

MEDIUM
5.8
CVSS Severity Score
EPSS Score0.0540%
EPSS Percentile37.81th
Published2006年4月21日
Last Modified2026年4月16日

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.

Affected Platforms (CPE)

📦
Cisco

Wireless Lan Solution Engine

= 2.0
📦
Cisco

Wireless Lan Solution Engine

= 2.0
📦
Cisco

Wireless Lan Solution Engine

= 2.1
📦
Cisco

Wireless Lan Solution Engine

= 2.1
📦
Cisco

Wireless Lan Solution Engine

= 2.2
📦
Cisco

Wireless Lan Solution Engine

= 2.2
📦
Cisco

Wireless Lan Solution Engine

= 2.3
📦
Cisco

Wireless Lan Solution Engine

= 2.3
📦
Cisco

Wireless Lan Solution Engine

= 2.4
📦
Cisco

Wireless Lan Solution Engine

= 2.4
📦
Cisco

Wireless Lan Solution Engine

= 2.5
📦
Cisco

Wireless Lan Solution Engine

= 2.5
📦
Cisco

Wireless Lan Solution Engine

= 2.6
📦
Cisco

Wireless Lan Solution Engine

= 2.6
📦
Cisco

Wireless Lan Solution Engine

= 2.7
📦
Cisco

Wireless Lan Solution Engine

= 2.7
📦
Cisco

Wireless Lan Solution Engine

= 2.8
📦
Cisco

Wireless Lan Solution Engine

= 2.8
📦
Cisco

Wireless Lan Solution Engine

= 2.9
📦
Cisco

Wireless Lan Solution Engine

= 2.9
📦
Cisco

Wireless Lan Solution Engine

= 2.10
📦
Cisco

Wireless Lan Solution Engine

= 2.10
📦
Cisco

Wireless Lan Solution Engine

= 2.11
📦
Cisco

Wireless Lan Solution Engine

= 2.11
📦
Cisco

Wireless Lan Solution Engine

= 2.12
📦
Cisco

Wireless Lan Solution Engine

= 2.12
📦
Cisco

Wireless Lan Solution Engine

= 2.13
📦
Cisco

Wireless Lan Solution Engine

= 2.13

References & Advisories

🔗 http://secunia.com/advisories/19736
🔗 http://securitytracker.com/id?1015965
🔗 http://www.assurance.com.au/advisories/200604-cisco.txt
🔗 http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml
🔗 http://www.osvdb.org/24812
🔗 http://www.securityfocus.com/archive/1/431367/30/5490/threaded
🔗 http://www.securityfocus.com/archive/1/431371/30/5490/threaded
🔗 http://www.securityfocus.com/bid/17604

関連する脆弱性情報

CVE-2004-039110.0

Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded use...

CVE-2007-538210.0

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Contro...

CVE-2006-19617.5

Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registra...

CVE-2007-14673.5

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control S...