Cross-Site Scripting Vulnerability in Citrix NetScaler Gateway
CVE-2018-18517

4.8MEDIUM

Key Information:

Vendor
Citrix
Vendor
CVE Published:
24 October 2018

Summary

Citrix NetScaler Gateway versions 10.5.x, 11.1.x, 12.0.x, and 12.1.x prior to their respective latest releases are susceptible to a Cross-Site Scripting (XSS) vulnerability. This flaw allows an attacker to inject malicious scripts into web pages viewed by users, potentially compromising user sessions and sensitive data. It is crucial for organizations to update to the latest versions to mitigate risks associated with this vulnerability.

References

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.