Cross-Site Scripting Vulnerability in Citrix Web Interface Products
CVE-2010-4515

Currently unrated

Key Information:

Vendor
Citrix
Status
Web Interface
Vendor
CVE Published:
9 December 2010

Summary

The vulnerability in Citrix Web Interface versions 5.0, 5.1, and 5.3 presents a risk where remote attackers can exploit the application to inject arbitrary web scripts or HTML through unspecified vectors. This flaw can potentially lead to unauthorized actions performed on behalf of users who visit an affected web page, compromising the integrity of their data and session. It is critical for users and administrators to apply necessary updates and patches to mitigate potential risks associated with this vulnerability.

References

http://www.securityfocus.com/bid/45291
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2010/3153
vdb-entryx_refsource_VUPEN
http://support.citrix.com/article/CTX127541
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.