Cross-Site Scripting Vulnerability in Citrix NetScaler Gateway
CVE-2018-18517

4.8MEDIUM

Key Information:

Vendor

Citrix
Status
Netscaler Gateway Firmware
Vendor
CVE Published:
24 October 2018

What is CVE-2018-18517?

Citrix NetScaler Gateway versions 10.5.x, 11.1.x, 12.0.x, and 12.1.x prior to their respective latest releases are susceptible to a Cross-Site Scripting (XSS) vulnerability. This flaw allows an attacker to inject malicious scripts into web pages viewed by users, potentially compromising user sessions and sensitive data. It is crucial for organizations to update to the latest versions to mitigate risks associated with this vulnerability.

References

http://www.securityfocus.com/bid/105725
vdb-entryx_refsource_BID
https://support.citrix.com/article/CTX239002
x_refsource_CONFIRM
http://www.securitytracker.com/id/1042023
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.