CVE-2014-4346

2014-07-1614:19:03

CWE-79

mitre

web.nvd.nist.gov

cve-2014-4346

cross-site scripting

xss

citrix netscaler

application delivery controller

nvd

security vulnerability

web script injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

67.8%

JSON

Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

citrixnetscaler_application_delivery_controller_firmwareMatch10.1

AND

citrixnetscaler_application_delivery_controllerMatch-

Node

citrixnetscaler_access_gateway_firmwareMatch10.1

AND

citrixnetscaler_access_gatewayMatch--enterprise

VendorProductVersionCPE
citrixnetscaler_application_delivery_controller_firmware10.1cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*
citrixnetscaler_application_delivery_controller-cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*
citrixnetscaler_access_gateway_firmware10.1cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.1:*:*:*:*:*:*:*
citrixnetscaler_access_gateway-cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	netscaler_application_delivery_controller_firmware	10.1	cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:::::::*
citrix	netscaler_application_delivery_controller	-	cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:::::::*
citrix	netscaler_access_gateway_firmware	10.1	cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.1:::::::*
citrix	netscaler_access_gateway	-	cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:::::*