Cross-Site Scripting Vulnerability in Citrix NetScaler Application Delivery Controller
CVE-2015-6672
Currently unrated
Key Information:
- Vendor
- Citrix
- Vendor
- CVE Published:
- 17 September 2015
Summary
A Cross-Site Scripting (XSS) vulnerability exists in the Administrative Web Interface of Citrix NetScaler Application Delivery Controller and NetScaler Gateway. This flaw allows remote attackers to inject harmful web scripts or HTML, which can compromise the integrity or confidentiality of sensitive information. Attackers can exploit this vulnerability via unvalidated input, leading to unauthorized actions and potential breaches of user security.
References
Timeline
Vulnerability published
Vulnerability Reserved