CVE-2016-4945

🗓️ 01 Jun 2016 22:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

Cross-site scripting (XSS) in Citrix NetScaler Gateway 11.0 before Build 66.1

Reporter	Title	Published	Views	Family All 9
CNVD	Citrix NetScaler Gateway Clickjacking Vulnerability	31 May 201600:00	–	cnvd
Cvelist	CVE-2016-4945	1 Jun 201622:00	–	cvelist
EUVD	EUVD-2016-5920	7 Oct 202500:30	–	euvd
NVD	CVE-2016-4945	1 Jun 201622:59	–	nvd
OpenVAS	Citrix NetScaler Gateway Login Form Hijacking Vulnerability (CTX213313)	30 May 201600:00	–	openvas
OSV	CVE-2016-4945	1 Jun 201622:59	–	osv
Packet Storm	Citrix Netscaler 11.0 Build 64.35 Cross Site Scripting	27 May 201600:00	–	packetstorm
Prion	Cross site scripting	1 Jun 201622:59	–	prion
VulnCheck KEV	VulnCheck KEV: CVE-2016-4945	16 Jul 202400:00	–	vulncheck_kev

NVD

Node

citrix netscaler_gateway_11.0Match-

AND

citrix netscaler_gateway_11.0_firmwareRange≤65.35

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/137221/Citrix-Netscaler-11.0-Build-64.35-Cross-Site-Scripting.html
persicon	www.persicon.com/tl_files/advisories/PERSICON-advisory-2016-No-1-citrix.txt
securitytracker	www.securitytracker.com/id/1036020
support	www.support.citrix.com/article/CTX213313
securityfocus	www.securityfocus.com/archive/1/538515/100/0/threaded

Parameter	Position	Path	Description	CWE
NSC_TMAC	nested	vpn/js/gateway_login_form_view.js	DOM-based XSS via unsanitized NSC_TMAC cookie content written to the login form action	CWE-79
NSC_TMAC	path	cgi/login	Login form submission can be redirected to an attacker-controlled URL via NSC_TMAC cookie value	CWE-79

17 Jun 2026 00:48Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.01372

cve-2016-4945 cross-site scripting xss citrix netscaler gateway security vulnerability