CVE-2012-6559: Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitr...

Security readout for executives and security teams

FreeNAC 3.02 has multiple cross-site scripting issues in web pages used by the product. A remote attacker could inject script or HTML through named request parameters. Business risk depends on whether FreeNAC is still deployed and who can reach its web interface. Likely exposure is limited to organizations still running FreeNAC 3.02, especially where stats.php or deviceadd.php are reachable by untrusted users or networks. Treat this as a targeted web application risk for legacy FreeNAC deployments. It is not KEV-listed, but public exploit information and administrative context justify prompt verification and access restriction. Mitigation focus: Check FreeNAC or maintainer guidance for fixed versions or official workarounds.; Restrict access to the FreeNAC web interface to trusted administrators and networks.; Add compensating controls such as WAF rules for suspicious script or HTML input..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.