Lucene search

[email protected]CVE-2023-6184

HistoryJan 18, 2024 - 1:15 a.m.

CVE-2023-6184

2024-01-1801:15:43

CWE-913

CWE-79

[email protected]

web.nvd.nist.gov

citrix

session recording

cross site scripting

cve-2023-6184

nvd

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

19.4%

JSON

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

Affected configurations

NVD

Node

citrixvirtual_apps_and_desktopsRange≤2311-

citrixvirtual_apps_and_desktopsMatch1912-ltsr

citrixvirtual_apps_and_desktopsMatch1912cu1ltsr

citrixvirtual_apps_and_desktopsMatch1912cu2ltsr

citrixvirtual_apps_and_desktopsMatch1912cu3

citrixvirtual_apps_and_desktopsMatch1912cu3ltsr

citrixvirtual_apps_and_desktopsMatch1912cu4ltsr

citrixvirtual_apps_and_desktopsMatch1912cu5ltsr

citrixvirtual_apps_and_desktopsMatch1912cu6ltsr

citrixvirtual_apps_and_desktopsMatch1912cu7ltsr

citrixvirtual_apps_and_desktopsMatch2203-ltsr

citrixvirtual_apps_and_desktopsMatch2203cu1ltsr

citrixvirtual_apps_and_desktopsMatch2203cu2ltsr

citrixvirtual_apps_and_desktopsMatch2203cu3ltsr

CPENameOperatorVersion
citrix:virtual_apps_and_desktopscitrix virtual apps and desktopsle2311
citrix:virtual_apps_and_desktopscitrix virtual apps and desktopseq1912
citrix:virtual_apps_and_desktopscitrix virtual apps and desktopseq2203

CPE	Name	Operator	Version
citrix:virtual_apps_and_desktops	citrix virtual apps and desktops	le	2311
citrix:virtual_apps_and_desktops	citrix virtual apps and desktops	eq	1912
citrix:virtual_apps_and_desktops	citrix virtual apps and desktops	eq	2203

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix Session Recording",
    "vendor": "Cloud Software Group",
    "versions": [
      {
        "lessThan": "0",
        "status": "affected",
        "version": "2311 Current Release",
        "versionType": "patch"
      },
      {
        "lessThan": "CU8 hotfix 19.12.8100.4",
        "status": "affected",
        "version": "1912 LTSR ",
        "versionType": "patch"
      },
      {
        "lessThan": "CU4",
        "status": "affected",
        "version": "2203 LTSR",
        "versionType": "patch"
      }
    ]
  }
]