Lucene search

K
cveMitreCVE-2013-6944
HistoryMar 11, 2014 - 1:00 p.m.

CVE-2013-6944

2014-03-1113:00:36
CWE-79
mitre
web.nvd.nist.gov
27
cve-2013-6944
cross-site scripting
xss
aaa tm vserver
citrix
netscaler
application delivery controller
adc
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

47.9%

Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
citrixnetscaler_application_delivery_controller_firmwareMatch9.3\(1\)
OR
citrixnetscaler_application_delivery_controller_firmwareMatch9.3.e
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.0
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1
VendorProductVersionCPE
citrixnetscaler_application_delivery_controller_firmware9.3(1)cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\(1\):*:*:*:*:*:*:*
citrixnetscaler_application_delivery_controller_firmware9.3.ecpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*
citrixnetscaler_application_delivery_controller_firmware10.0cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*
citrixnetscaler_application_delivery_controller_firmware10.1cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

47.9%

Related for CVE-2013-6944