Lucene search

K
cveCitrixCVE-2023-6184
HistoryJan 18, 2024 - 1:15 a.m.

CVE-2023-6184

2024-01-1801:15:43
CWE-913
CWE-79
Citrix
web.nvd.nist.gov
42
citrix
session recording
cross site scripting
cve-2023-6184
nvd

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.3%

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

Affected configurations

Nvd
Node
citrixvirtual_apps_and_desktopsRange2311-
OR
citrixvirtual_apps_and_desktopsMatch1912-ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu1ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu2ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu3
OR
citrixvirtual_apps_and_desktopsMatch1912cu3ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu4ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu5ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu6ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu7ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203-ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203cu1ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203cu2ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203cu3ltsr
VendorProductVersionCPE
citrixvirtual_apps_and_desktops*cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:*:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu6:*:*:ltsr:*:*:*
citrixvirtual_apps_and_desktops1912cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu7:*:*:ltsr:*:*:*
Rows per page:
1-10 of 141

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix Session Recording",
    "vendor": "Cloud Software Group",
    "versions": [
      {
        "lessThan": "0",
        "status": "affected",
        "version": "2311 Current Release",
        "versionType": "patch"
      },
      {
        "lessThan": "CU8 hotfix 19.12.8100.4",
        "status": "affected",
        "version": "1912 LTSR ",
        "versionType": "patch"
      },
      {
        "lessThan": "CU4",
        "status": "affected",
        "version": "2203 LTSR",
        "versionType": "patch"
      }
    ]
  }
]

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.3%