MSRXMSRXSecurity
Vulnerabilities / CVE-2020-8245

CVE-2020-8245

Published 2020-09-18 · Modified

CVE-2020-8245

6.1 MEDIUM
CVSS 3.1 · NVD
0.9%
chance of exploitation in the next 30 days (EPSS; higher than 60% of CVEs)

Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b leads to an HTML Injection attack against the SSL VPN web portal.

Scores

6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NNVD
4.3AV:N/AC:M/Au:N/C:N/I:P/A:NNVD

Affected products

  • citrix application delivery controller firmware: ≥ 11.1, < 11.1-65.12; ≥ 12.1, < 12.1-58.15; ≥ 13.0, < 13.0-64.35
  • citrix gateway: ≥ 11.1, < 11.1-65.12; ≥ 13.0, < 13.0-64.35
  • citrix netscaler gateway: ≥ 12.1, < 12.1-58.15

Weakness: CWE-79

1 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVECheck your dependenciesScan a website