CVE-2014-4346

MEDIUM · 4.3 CVSS Gepubliceerd: 16-07-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendors

Citrix

Affected products

Netscaler Application Delivery Controller Firmware Netscaler Application Delivery Controller Netscaler Access Gateway Firmware Netscaler Access Gateway

References

seclists.org
secunia.com
support.citrix.com
www.securityfocus.com
www.securityfocus.com
www.securitytracker.com
www.securitytracker.com
exchange.xforce.ibmcloud.com
www.sec-consult.com