CVE-2018-6811

Published: Mar 6, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.

Affected (8)

Products: Citrix: Netscaler Application Delivery Controller Firmware, Netscaler Gateway Firmware

Citrix

2 products

Netscaler Application Delivery Controller Firmware

Netscaler Gateway Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Citrix Netscaler Application Delivery Controller Firmware	Version 10.5
Citrix Netscaler Application Delivery Controller Firmware	Version 11.0
Citrix Netscaler Application Delivery Controller Firmware	Version 11.1
Citrix Netscaler Application Delivery Controller Firmware	Version 12.0

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Citrix Netscaler Gateway Firmware	Version 10.5
Citrix Netscaler Gateway Firmware	Version 11.0
Citrix Netscaler Gateway Firmware	Version 11.1
Citrix Netscaler Gateway Firmware	Version 12.0