CVE-2022-27503

6.1MEDIUM

Key Information

Vendor: Citrix
Status: Storefront
Vendor: CVE Published:; 13 April 2022

Summary

Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9

Affected Version(s)

StoreFront < 1912

StoreFront < 3.12

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published.
Apr 13, 2022
Vulnerability Reserved.
Mar 21, 2022

Collectors

NVD DatabaseMitre Database

.