CVE-2020-8191

🗓️ 10 Jul 2020 15:38:10Reported by hackeroneType

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting (XSS)

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CTX276688: Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update	9 Jul 202000:00	–	attackerkb
Circl	CVE-2020-8191	18 Nov 202400:00	–	circl
Tenable Nessus	Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX276688)	8 Jul 202000:00	–	nessus
Tenable Nessus	Citrix SD-WAN WANOP 10.2.x Multiple Vulnerabilities (CTX276688)	2 Sep 202000:00	–	nessus
Check Point Advisories	Citrix ADC Reflected Cross Site Scripting (CVE-2020-8191)	27 Jul 202000:00	–	checkpoint_advisories
Citrix	Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update	7 Jul 202004:00	–	citrix
Citrix	Netscaler CVE & Security Guide	14 Jul 202400:00	–	citrix
Cvelist	CVE-2020-8191	10 Jul 202015:38	–	cvelist
Nuclei	Citrix ADC/Gateway - Cross-Site Scripting	1 Jun 202605:38	–	nuclei
NVD	CVE-2020-8191	10 Jul 202016:15	–	nvd

NVD

Node

citrix application_delivery_controller_firmwareRange10.5–10.5-70.18

citrix application_delivery_controller_firmwareRange11.1–11.1-64.14

citrix application_delivery_controller_firmwareRange12.0–12.0-63.21

citrix application_delivery_controller_firmwareRange12.1–12.1-57.18

citrix application_delivery_controller_firmwareRange13.0–13.0-58.30

AND

citrix application_delivery_controllerMatch-

Node

citrix netscaler_gateway_firmwareRange10.5–10.5-70.18

citrix netscaler_gateway_firmwareRange11.1–11.1-64.14

citrix netscaler_gateway_firmwareRange12.0–12.0-63.21

citrix netscaler_gateway_firmwareRange12.1–12.1-57.18

AND

citrix netscaler_gatewayMatch-

Node

citrix gateway_firmwareRange13.0–13.0-58.30

AND

citrix gatewayMatch-

Node

citrix sd-wan_wanopRange10.2–10.2.7

citrix sd-wan_wanopRange11.0–11.0.3d

citrix sd-wan_wanopRange11.1–11.1.1a

AND

citrix 4000-woMatch-

citrix 4100-woMatch-

citrix 5000-woMatch-

citrix 5100-woMatch-

[
  {
    "product": "Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX276688

21 Nov 2024 05:38Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

CVSS 3.16.1

EPSS0.91043