Cisco Wireless Control System Software vulnerabilities

4 CVEs affecting Cisco Wireless Control System Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4014, published 2012-05-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-2826, published 2010-08-17. High severity, CVSS 9.0. EPSS: 1.3% chance of exploitation in the next 30 days. SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY…
CVE-2010-2986, published 2010-08-10. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164…
CVE-2011-4014, published 2012-05-02. Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days. The TAC Case Attachment tool in Cisco Wireless Control System (WCS) 7.0 allows remote authenticated users to read arbitrary files under webnms/Temp/ via unspecified vectors, aka Bug ID CSCtq86807.
CVE-2010-2987, published 2010-08-10. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, allow…