Lucene search
CitrixCTX477714HistoryMay 09, 2023 - 1:26 p.m.
Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-24487, CVE-2023-24488
2023-05-0913:26:49
support.citrix.com
138
citrix
adc
gateway
vulnerabilities
versions
security bulletin
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.055 Low
EPSS
Percentile
93.2%
Vulnerabilities have been discovered in Citrix ADC and Citrix Gateway listed below, that, if exploited, could result in the following security issues:
Impacted Products, Versions and Components
The following supported versions of Citrix ADC and Citrix Gateway are affected by this vulnerability:
- Citrix ADC and Citrix Gateway13.1before13.1-45.61
- Citrix ADC and Citrix Gateway13.0before 13.0-90.11
- Citrix ADC andCitrixGateway12.1before12.1-65.35
- Citrix ADC 12.1-FIPS before 12.1-55.296
- Citrix ADC 12.1-NDcPP before 12.1-55.296
This bulletin only applies to customer-managed Citrix ADC and Citrix Gateway. Customers using Citrix-managed cloud services or Citrix-managed Adaptive Authentication do not need to take any action.
Affected configurations
Node
citrixcitrix_presentation_serverRange13.1≥
ORcitrixcitrix_presentation_serverRange≤45.61
ORcitrixcitrix_presentation_serverRange14.0.0≥
ORcitrixcitrix_presentation_serverRange15.0.0≥
ORcitrixcitrix_presentation_serverRange16.0.0≥
ORcitrixcitrix_presentation_serverRange17.0.0≥
ORcitrixcitrix_presentation_serverRange18.0.0≥
ORcitrixcitrix_presentation_serverRange19.0.0≥
ORcitrixcitrix_presentation_serverRange20.0.0≥
ORcitrixcitrix_presentation_serverRange21.0.0≥
ORcitrixcitrix_presentation_serverRange22.0.0≥
ORcitrixcitrix_presentation_serverRange23.0.0≥
ORcitrixcitrix_presentation_serverRange24.0.0≥
ORcitrixcitrix_presentation_serverRange25.0.0≥
ORcitrixcitrix_presentation_serverRange26.0.0≥
ORcitrixcitrix_presentation_serverRange27.0.0≥
ORcitrixcitrix_presentation_serverRange28.0.0≥
ORcitrixcitrix_presentation_serverRange29.0.0≥
ORcitrixcitrix_presentation_serverRange30.0.0≥
ORcitrixcitrix_presentation_serverRange31.0.0≥
ORcitrixcitrix_presentation_serverRange32.0.0≥
ORcitrixcitrix_presentation_serverRange33.0.0≥
ORcitrixcitrix_presentation_serverRange34.0.0≥
ORcitrixcitrix_presentation_serverRange35.0.0≥
ORcitrixcitrix_presentation_serverRange36.0.0≥
ORcitrixcitrix_presentation_serverRange37.0.0≥
ORcitrixcitrix_presentation_serverRange38.0.0≥
ORcitrixcitrix_presentation_serverRange39.0.0≥
ORcitrixcitrix_presentation_serverRange40.0.0≥
ORcitrixcitrix_presentation_serverRange41.0.0≥
ORcitrixcitrix_presentation_serverRange42.0.0≥
ORcitrixcitrix_presentation_serverRange43.0.0≥
ORcitrixcitrix_presentation_serverRange44.0.0≥
ORcitrixgatewayRange13.1≥
ORcitrixgatewayRange≤45.61
ORcitrixgatewayRange14.0.0≥
ORcitrixgatewayRange15.0.0≥
ORcitrixgatewayRange16.0.0≥
ORcitrixgatewayRange17.0.0≥
ORcitrixgatewayRange18.0.0≥
ORcitrixgatewayRange19.0.0≥
ORcitrixgatewayRange20.0.0≥
ORcitrixgatewayRange21.0.0≥
ORcitrixgatewayRange22.0.0≥
ORcitrixgatewayRange23.0.0≥
ORcitrixgatewayRange24.0.0≥
ORcitrixgatewayRange25.0.0≥
ORcitrixgatewayRange26.0.0≥
ORcitrixgatewayRange27.0.0≥
ORcitrixgatewayRange28.0.0≥
ORcitrixgatewayRange29.0.0≥
ORcitrixgatewayRange30.0.0≥
ORcitrixgatewayRange31.0.0≥
ORcitrixgatewayRange32.0.0≥
ORcitrixgatewayRange33.0.0≥
ORcitrixgatewayRange34.0.0≥
ORcitrixgatewayRange35.0.0≥
ORcitrixgatewayRange36.0.0≥
ORcitrixgatewayRange37.0.0≥
ORcitrixgatewayRange38.0.0≥
ORcitrixgatewayRange39.0.0≥
ORcitrixgatewayRange40.0.0≥
ORcitrixgatewayRange41.0.0≥
ORcitrixgatewayRange42.0.0≥
ORcitrixgatewayRange43.0.0≥
ORcitrixgatewayRange44.0.0≥
ORcitrixcitrix_presentation_serverRange13.0≥
ORcitrixcitrix_presentation_serverRange≤90.11
ORcitrixcitrix_presentation_serverRange14.0.0≥
ORcitrixcitrix_presentation_serverRange15.0.0≥
ORcitrixcitrix_presentation_serverRange16.0.0≥
ORcitrixcitrix_presentation_serverRange17.0.0≥
ORcitrixcitrix_presentation_serverRange18.0.0≥
ORcitrixcitrix_presentation_serverRange19.0.0≥
ORcitrixcitrix_presentation_serverRange20.0.0≥
ORcitrixcitrix_presentation_serverRange21.0.0≥
ORcitrixcitrix_presentation_serverRange22.0.0≥
ORcitrixcitrix_presentation_serverRange23.0.0≥
ORcitrixcitrix_presentation_serverRange24.0.0≥
ORcitrixcitrix_presentation_serverRange25.0.0≥
ORcitrixcitrix_presentation_serverRange26.0.0≥
ORcitrixcitrix_presentation_serverRange27.0.0≥
ORcitrixcitrix_presentation_serverRange28.0.0≥
ORcitrixcitrix_presentation_serverRange29.0.0≥
ORcitrixcitrix_presentation_serverRange30.0.0≥
ORcitrixcitrix_presentation_serverRange31.0.0≥
ORcitrixcitrix_presentation_serverRange32.0.0≥
ORcitrixcitrix_presentation_serverRange33.0.0≥
ORcitrixcitrix_presentation_serverRange34.0.0≥
ORcitrixcitrix_presentation_serverRange35.0.0≥
ORcitrixcitrix_presentation_serverRange36.0.0≥
ORcitrixcitrix_presentation_serverRange37.0.0≥
ORcitrixcitrix_presentation_serverRange38.0.0≥
ORcitrixcitrix_presentation_serverRange39.0.0≥
ORcitrixcitrix_presentation_serverRange40.0.0≥
ORcitrixcitrix_presentation_serverRange41.0.0≥
ORcitrixcitrix_presentation_serverRange42.0.0≥
ORcitrixcitrix_presentation_serverRange43.0.0≥
ORcitrixcitrix_presentation_serverRange44.0.0≥
ORcitrixcitrix_presentation_serverRange45.0.0≥
ORcitrixcitrix_presentation_serverRange46.0.0≥
ORcitrixcitrix_presentation_serverRange47.0.0≥
ORcitrixcitrix_presentation_serverRange48.0.0≥
ORcitrixcitrix_presentation_serverRange49.0.0≥
ORcitrixcitrix_presentation_serverRange50.0.0≥
ORcitrixcitrix_presentation_serverRange51.0.0≥
ORcitrixcitrix_presentation_serverRange52.0.0≥
ORcitrixcitrix_presentation_serverRange53.0.0≥
ORcitrixcitrix_presentation_serverRange54.0.0≥
ORcitrixcitrix_presentation_serverRange55.0.0≥
ORcitrixcitrix_presentation_serverRange56.0.0≥
ORcitrixcitrix_presentation_serverRange57.0.0≥
ORcitrixcitrix_presentation_serverRange58.0.0≥
ORcitrixcitrix_presentation_serverRange59.0.0≥
ORcitrixcitrix_presentation_serverRange60.0.0≥
ORcitrixcitrix_presentation_serverRange61.0.0≥
ORcitrixcitrix_presentation_serverRange62.0.0≥
ORcitrixcitrix_presentation_serverRange63.0.0≥
ORcitrixcitrix_presentation_serverRange64.0.0≥
ORcitrixcitrix_presentation_serverRange65.0.0≥
ORcitrixcitrix_presentation_serverRange66.0.0≥
ORcitrixcitrix_presentation_serverRange67.0.0≥
ORcitrixcitrix_presentation_serverRange68.0.0≥
ORcitrixcitrix_presentation_serverRange69.0.0≥
ORcitrixcitrix_presentation_serverRange70.0.0≥
ORcitrixcitrix_presentation_serverRange71.0.0≥
ORcitrixcitrix_presentation_serverRange72.0.0≥
ORcitrixcitrix_presentation_serverRange73.0.0≥
ORcitrixcitrix_presentation_serverRange74.0.0≥
ORcitrixcitrix_presentation_serverRange75.0.0≥
ORcitrixcitrix_presentation_serverRange76.0.0≥
ORcitrixcitrix_presentation_serverRange77.0.0≥
ORcitrixcitrix_presentation_serverRange78.0.0≥
ORcitrixcitrix_presentation_serverRange79.0.0≥
ORcitrixcitrix_presentation_serverRange80.0.0≥
ORcitrixcitrix_presentation_serverRange81.0.0≥
ORcitrixcitrix_presentation_serverRange82.0.0≥
ORcitrixcitrix_presentation_serverRange83.0.0≥
ORcitrixcitrix_presentation_serverRange84.0.0≥
ORcitrixcitrix_presentation_serverRange85.0.0≥
ORcitrixcitrix_presentation_serverRange86.0.0≥
ORcitrixcitrix_presentation_serverRange87.0.0≥
ORcitrixcitrix_presentation_serverRange88.0.0≥
ORcitrixcitrix_presentation_serverRange89.0.0≥
ORcitrixgatewayRange13.0≥
ORcitrixgatewayRange≤90.11
ORcitrixgatewayRange14.0.0≥
ORcitrixgatewayRange15.0.0≥
ORcitrixgatewayRange16.0.0≥
ORcitrixgatewayRange17.0.0≥
ORcitrixgatewayRange18.0.0≥
ORcitrixgatewayRange19.0.0≥
ORcitrixgatewayRange20.0.0≥
ORcitrixgatewayRange21.0.0≥
ORcitrixgatewayRange22.0.0≥
ORcitrixgatewayRange23.0.0≥
ORcitrixgatewayRange24.0.0≥
ORcitrixgatewayRange25.0.0≥
ORcitrixgatewayRange26.0.0≥
ORcitrixgatewayRange27.0.0≥
ORcitrixgatewayRange28.0.0≥
ORcitrixgatewayRange29.0.0≥
ORcitrixgatewayRange30.0.0≥
ORcitrixgatewayRange31.0.0≥
ORcitrixgatewayRange32.0.0≥
ORcitrixgatewayRange33.0.0≥
ORcitrixgatewayRange34.0.0≥
ORcitrixgatewayRange35.0.0≥
ORcitrixgatewayRange36.0.0≥
ORcitrixgatewayRange37.0.0≥
ORcitrixgatewayRange38.0.0≥
ORcitrixgatewayRange39.0.0≥
ORcitrixgatewayRange40.0.0≥
ORcitrixgatewayRange41.0.0≥
ORcitrixgatewayRange42.0.0≥
ORcitrixgatewayRange43.0.0≥
ORcitrixgatewayRange44.0.0≥
ORcitrixgatewayRange45.0.0≥
ORcitrixgatewayRange46.0.0≥
ORcitrixgatewayRange47.0.0≥
ORcitrixgatewayRange48.0.0≥
ORcitrixgatewayRange49.0.0≥
ORcitrixgatewayRange50.0.0≥
ORcitrixgatewayRange51.0.0≥
ORcitrixgatewayRange52.0.0≥
ORcitrixgatewayRange53.0.0≥
ORcitrixgatewayRange54.0.0≥
ORcitrixgatewayRange55.0.0≥
ORcitrixgatewayRange56.0.0≥
ORcitrixgatewayRange57.0.0≥
ORcitrixgatewayRange58.0.0≥
ORcitrixgatewayRange59.0.0≥
ORcitrixgatewayRange60.0.0≥
ORcitrixgatewayRange61.0.0≥
ORcitrixgatewayRange62.0.0≥
ORcitrixgatewayRange63.0.0≥
ORcitrixgatewayRange64.0.0≥
ORcitrixgatewayRange65.0.0≥
ORcitrixgatewayRange66.0.0≥
ORcitrixgatewayRange67.0.0≥
ORcitrixgatewayRange68.0.0≥
ORcitrixgatewayRange69.0.0≥
ORcitrixgatewayRange70.0.0≥
ORcitrixgatewayRange71.0.0≥
ORcitrixgatewayRange72.0.0≥
ORcitrixgatewayRange73.0.0≥
ORcitrixgatewayRange74.0.0≥
ORcitrixgatewayRange75.0.0≥
ORcitrixgatewayRange76.0.0≥
ORcitrixgatewayRange77.0.0≥
ORcitrixgatewayRange78.0.0≥
ORcitrixgatewayRange79.0.0≥
ORcitrixgatewayRange80.0.0≥
ORcitrixgatewayRange81.0.0≥
ORcitrixgatewayRange82.0.0≥
ORcitrixgatewayRange83.0.0≥
ORcitrixgatewayRange84.0.0≥
ORcitrixgatewayRange85.0.0≥
ORcitrixgatewayRange86.0.0≥
ORcitrixgatewayRange87.0.0≥
ORcitrixgatewayRange88.0.0≥
ORcitrixgatewayRange89.0.0≥
ORcitrixcitrix_presentation_serverRange12.1≥
ORcitrixcitrix_presentation_serverRange≤65.35
ORcitrixcitrix_presentation_serverRange13.0.0≥
ORcitrixcitrix_presentation_serverRange14.0.0≥
ORcitrixcitrix_presentation_serverRange15.0.0≥
ORcitrixcitrix_presentation_serverRange16.0.0≥
ORcitrixcitrix_presentation_serverRange17.0.0≥
ORcitrixcitrix_presentation_serverRange18.0.0≥
ORcitrixcitrix_presentation_serverRange19.0.0≥
ORcitrixcitrix_presentation_serverRange20.0.0≥
ORcitrixcitrix_presentation_serverRange21.0.0≥
ORcitrixcitrix_presentation_serverRange22.0.0≥
ORcitrixcitrix_presentation_serverRange23.0.0≥
ORcitrixcitrix_presentation_serverRange24.0.0≥
ORcitrixcitrix_presentation_serverRange25.0.0≥
ORcitrixcitrix_presentation_serverRange26.0.0≥
ORcitrixcitrix_presentation_serverRange27.0.0≥
ORcitrixcitrix_presentation_serverRange28.0.0≥
ORcitrixcitrix_presentation_serverRange29.0.0≥
ORcitrixcitrix_presentation_serverRange30.0.0≥
ORcitrixcitrix_presentation_serverRange31.0.0≥
ORcitrixcitrix_presentation_serverRange32.0.0≥
ORcitrixcitrix_presentation_serverRange33.0.0≥
ORcitrixcitrix_presentation_serverRange34.0.0≥
ORcitrixcitrix_presentation_serverRange35.0.0≥
ORcitrixcitrix_presentation_serverRange36.0.0≥
ORcitrixcitrix_presentation_serverRange37.0.0≥
ORcitrixcitrix_presentation_serverRange38.0.0≥
ORcitrixcitrix_presentation_serverRange39.0.0≥
ORcitrixcitrix_presentation_serverRange40.0.0≥
ORcitrixcitrix_presentation_serverRange41.0.0≥
ORcitrixcitrix_presentation_serverRange42.0.0≥
ORcitrixcitrix_presentation_serverRange43.0.0≥
ORcitrixcitrix_presentation_serverRange44.0.0≥
ORcitrixcitrix_presentation_serverRange45.0.0≥
ORcitrixcitrix_presentation_serverRange46.0.0≥
ORcitrixcitrix_presentation_serverRange47.0.0≥
ORcitrixcitrix_presentation_serverRange48.0.0≥
ORcitrixcitrix_presentation_serverRange49.0.0≥
ORcitrixcitrix_presentation_serverRange50.0.0≥
ORcitrixcitrix_presentation_serverRange51.0.0≥
ORcitrixcitrix_presentation_serverRange52.0.0≥
ORcitrixcitrix_presentation_serverRange53.0.0≥
ORcitrixcitrix_presentation_serverRange54.0.0≥
ORcitrixcitrix_presentation_serverRange55.0.0≥
ORcitrixcitrix_presentation_serverRange56.0.0≥
ORcitrixcitrix_presentation_serverRange57.0.0≥
ORcitrixcitrix_presentation_serverRange58.0.0≥
ORcitrixcitrix_presentation_serverRange59.0.0≥
ORcitrixcitrix_presentation_serverRange60.0.0≥
ORcitrixcitrix_presentation_serverRange61.0.0≥
ORcitrixcitrix_presentation_serverRange62.0.0≥
ORcitrixcitrix_presentation_serverRange63.0.0≥
ORcitrixcitrix_presentation_serverRange64.0.0≥
ORcitrixgatewayRange12.1≥
ORcitrixgatewayRange≤65.35
ORcitrixgatewayRange13.0.0≥
ORcitrixgatewayRange14.0.0≥
ORcitrixgatewayRange15.0.0≥
ORcitrixgatewayRange16.0.0≥
ORcitrixgatewayRange17.0.0≥
ORcitrixgatewayRange18.0.0≥
ORcitrixgatewayRange19.0.0≥
ORcitrixgatewayRange20.0.0≥
ORcitrixgatewayRange21.0.0≥
ORcitrixgatewayRange22.0.0≥
ORcitrixgatewayRange23.0.0≥
ORcitrixgatewayRange24.0.0≥
ORcitrixgatewayRange25.0.0≥
ORcitrixgatewayRange26.0.0≥
ORcitrixgatewayRange27.0.0≥
ORcitrixgatewayRange28.0.0≥
ORcitrixgatewayRange29.0.0≥
ORcitrixgatewayRange30.0.0≥
ORcitrixgatewayRange31.0.0≥
ORcitrixgatewayRange32.0.0≥
ORcitrixgatewayRange33.0.0≥
ORcitrixgatewayRange34.0.0≥
ORcitrixgatewayRange35.0.0≥
ORcitrixgatewayRange36.0.0≥
ORcitrixgatewayRange37.0.0≥
ORcitrixgatewayRange38.0.0≥
ORcitrixgatewayRange39.0.0≥
ORcitrixgatewayRange40.0.0≥
ORcitrixgatewayRange41.0.0≥
ORcitrixgatewayRange42.0.0≥
ORcitrixgatewayRange43.0.0≥
ORcitrixgatewayRange44.0.0≥
ORcitrixgatewayRange45.0.0≥
ORcitrixgatewayRange46.0.0≥
ORcitrixgatewayRange47.0.0≥
ORcitrixgatewayRange48.0.0≥
ORcitrixgatewayRange49.0.0≥
ORcitrixgatewayRange50.0.0≥
ORcitrixgatewayRange51.0.0≥
ORcitrixgatewayRange52.0.0≥
ORcitrixgatewayRange53.0.0≥
ORcitrixgatewayRange54.0.0≥
ORcitrixgatewayRange55.0.0≥
ORcitrixgatewayRange56.0.0≥
ORcitrixgatewayRange57.0.0≥
ORcitrixgatewayRange58.0.0≥
ORcitrixgatewayRange59.0.0≥
ORcitrixgatewayRange60.0.0≥
ORcitrixgatewayRange61.0.0≥
ORcitrixgatewayRange62.0.0≥
ORcitrixgatewayRange63.0.0≥
ORcitrixgatewayRange64.0.0≥
ORcitrixcitrix_presentation_serverRange≤12.1
ORcitrixcitrix_presentation_serverRange≤13.1
ORcitrixcitrix_presentation_serverRange≤12.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| citrix adc | ge | 13.1 | |
| citrix adc | le | 45.61 | |
| citrix adc | ge | 14.0.0 | |
| citrix adc | ge | 15.0.0 | |
| citrix adc | ge | 16.0.0 | |
| citrix adc | ge | 17.0.0 | |
| citrix adc | ge | 18.0.0 | |
| citrix adc | ge | 19.0.0 | |
| citrix adc | ge | 20.0.0 | |
| citrix adc | ge | 21.0.0 |
Related
nessus
nessus
Citrix ADC and Citrix Gateway Multiple Vulnerabilities (CTX477714)
2023-05-11 00:00:00
prion
prion
Cross site scripting
2023-07-10 21:15:00
Design/Logic Flaw
2023-07-10 21:15:00
cve
cve
CVE-2023-24487
2023-07-10 21:15:10
CVE-2023-24488
2023-07-10 21:15:10
cvelist
cvelist
CVE-2023-24487 Arbitrary file read
2023-07-10 20:51:59
CVE-2023-24488 Cross site scripting
2023-07-10 20:41:31
nuclei
nuclei
Citrix Gateway and Citrix ADC - Cross-Site Scripting
2023-06-30 17:58:56
nvd
nvd
CVE-2023-24488
2023-07-10 21:15:10
CVE-2023-24487
2023-07-10 21:15:10
githubexploit
githubexploit
Exploit for Cross-site Scripting in Citrix Gateway
2023-07-04 00:29:56
Exploit for Cross-site Scripting in Citrix Gateway
2023-07-01 17:47:17
Exploit for Cross-site Scripting in Citrix Gateway
2023-07-31 11:29:16
hackerone
hackerone
U.S. Dept Of Defense: CVE-2023-24488 xss on https://██████/
2023-07-01 03:41:40
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.055 Low
EPSS
Percentile
93.2%
Related for CTX477714