MSRXVulnerabilities / CVE-2018-6811
CVE-2018-6811
Published 2018-03-06 · Modified
CVE-2018-6811
6.1 MEDIUM
CVSS 3.0 · NVD
CVSS 3.0 · NVD
1.2%
chance of exploitation in the next 30 days (EPSS; higher than 67% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 67% of CVEs)
Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.
Affected products
- citrix netscaler application delivery controller firmware: 10.5; 11.0; 11.1; 12.0
- citrix netscaler gateway firmware: 10.5; 11.0; 11.1; 12.0
Weakness: CWE-79
2 references (advisories, patches, write-ups)
- http://www.securitytracker.com/id/1040440 · Third Party Advisory, VDB Entry
- https://support.citrix.com/article/CTX232161 · Patch, Vendor Advisory
Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.