CVE-2015-7997
Beschrijving NL
Meerdere cross-site scripting (XSS) -kwetsbaarheden in de Nitro API in Citrix NetScaler Application Delivery Controller (ADC) en NetScaler Gateway vóór 10.1 Build 133.9, 10.5 vóór Build 58.11 en 10.5.e vóór Build 56.1505.e op NetScaler Service Delivery Appliance Service VM (SVM) -apparaten stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren.
Origineel (Engels) tonen
Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.