Cross-Site Scripting Vulnerability in Citrix NetScaler Gateway
CVE-2018-18517
4.8MEDIUM
Summary
Citrix NetScaler Gateway versions 10.5.x, 11.1.x, 12.0.x, and 12.1.x prior to their respective latest releases are susceptible to a Cross-Site Scripting (XSS) vulnerability. This flaw allows an attacker to inject malicious scripts into web pages viewed by users, potentially compromising user sessions and sensitive data. It is crucial for organizations to update to the latest versions to mitigate risks associated with this vulnerability.
References
CVSS V3.1
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved