CVE-2023-3466

Published: Jul 19, 2023Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Reflected Cross-Site Scripting (XSS)

Affected (8)

Products: Citrix: Netscaler Application Delivery Controller, Netscaler Gateway

2 products

Netscaler Application Delivery Controller

Netscaler Gateway

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Citrix Netscaler Application Delivery Controller	From 13.0 to 13.0-91.13
Citrix Netscaler Application Delivery Controller	From 13.1 to 13.1-49.13
Citrix Netscaler Application Delivery Controller	From 12.1 to 12.1-55.297
Citrix Netscaler Application Delivery Controller	From 13.1 to 13.1-37.159
Citrix Netscaler Application Delivery Controller	From 12.1 to 12.1-55.297
Citrix Netscaler Application Delivery Controller	Version 11.1-65.22
Citrix Netscaler Gateway	From 13.0 to 13.0-91.13
Citrix Netscaler Gateway	From 13.1 to 13.1-49.13

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467

Source: secure@citrix.com

Vendor Advisory

https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.