CVE-2014-2191: Cisco Broadband Access Center Telco Wireless Software

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun91113.

Affected products

• Cisco Broadband Access Center Telco Wireless Software: affected versions not specified

Published 2014-05-07. Last modified 2026-06-17.