[email protected]CVE-2014-4346

HistoryJul 16, 2014 - 2:19 p.m.

CVE-2014-4346

2014-07-1614:19:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-4346

cross-site scripting

xss

citrix netscaler

application delivery controller

nvd

security vulnerability

web script injection

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.6%

JSON

Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq10.1
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllereq-
citrix:netscaler_access_gateway_firmwarecitrix netscaler access gateway firmwareeq10.1
citrix:netscaler_access_gatewaycitrix netscaler access gatewayeq-

CPE	Name	Operator	Version
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	10.1
citrix:netscaler_application_delivery_controller	citrix netscaler application delivery controller	eq	-
citrix:netscaler_access_gateway_firmware	citrix netscaler access gateway firmware	eq	10.1
citrix:netscaler_access_gateway	citrix netscaler access gateway	eq	-

References

seclists.org/fulldisclosure/2014/Jul/77

secunia.com/advisories/59942

support.citrix.com/article/CTX140863

www.securityfocus.com/archive/1/532802/100/0/threaded

www.securityfocus.com/bid/68535

www.securitytracker.com/id/1030572

www.securitytracker.com/id/1030573

exchange.xforce.ibmcloud.com/vulnerabilities/94493

www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.6%

JSON

Related for CVE-2014-4346

cvelist1 prion1 securityvulns2 packetstorm1 nessus1