CVE-2018-10649

Published: May 23, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3.

Affected (3)

Products: Citrix: Xenmobile Server

1 product

Xenmobile Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Citrix Xenmobile Server	Version 10.7
Citrix Xenmobile Server	Version 10.7 rp1
Citrix Xenmobile Server	Version 10.7 rp2

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://support.citrix.com/article/CTX234879

Source: cve@mitre.org

Vendor Advisory

https://support.citrix.com/article/CTX234879

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.