Lucene search

[email protected]CVE-2023-24488

HistoryJul 10, 2023 - 9:15 p.m.

CVE-2023-24488

2023-07-1021:15:10

CWE-79

[email protected]

web.nvd.nist.gov

710

cve-2023-24488

cross site scripting

citrix adc

citrix gateway

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 Medium

AI Score

Confidence

High

0.055 Low

EPSS

Percentile

93.2%

JSON

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting

Affected configurations

NVD

Node

citrixgatewayRange12.1–12.1-65.35

citrixgatewayRange13.0–13.0-90.11

citrixgatewayRange13.1–13.1-45.61

Node

citrixapplication_delivery_controllerRange12.1–12.1-55.296fips

citrixapplication_delivery_controllerRange12.1–12.1-55.296ndcpp

citrixapplication_delivery_controllerRange12.1–12.1-65.35-

citrixapplication_delivery_controllerRange13.0–13.0-90.11

citrixapplication_delivery_controllerRange13.1–13.1-45.61

CPENameOperatorVersion
citrix:gatewaycitrix gatewaylt12.1-65.35
citrix:gatewaycitrix gatewaylt13.0-90.11
citrix:gatewaycitrix gatewaylt13.1-45.61

CPE	Name	Operator	Version
citrix:gateway	citrix gateway	lt	12.1-65.35
citrix:gateway	citrix gateway	lt	13.0-90.11
citrix:gateway	citrix gateway	lt	13.1-45.61

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix ADC and Citrix Gateway ",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "13.1-45.61 ",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "13.0-90.11 ",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-65.35",
        "status": "affected",
        "version": "12.1",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "13.1-37.150 ",
        "status": "affected",
        "version": "13.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-NDcPP",
        "versionType": "patch"
      }
    ]
  }
]