Reflected Cross-Site Scripting Vulnerability in Citrix Products
CVE-2022-27505

6.1MEDIUM

Key Information:

Vendor

Citirx

Status
Citrix Sd-wan
Vendor
CVE Published:
13 April 2022

What is CVE-2022-27505?

This vulnerability arises from improper sanitization of input, enabling attackers to inject malicious scripts into the browser of unsuspecting users. By exploiting this reflected XSS flaw, an attacker could potentially manipulate web content, steal sensitive data, or conduct phishing campaigns. It is essential for organizations using Citrix products to implement robust input validation and output encoding mechanisms to mitigate this risk.

Affected Version(s)

Citrix SD-WAN < unspecified

References

https://support.citrix.com/article/CTX370550
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.