CVE-2023-3466

2023-07-1919:15:12

CWE-20

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-3466

reflected cross-site scripting

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

8.4

Confidence

High

EPSS

0.001

Percentile

27.6%

JSON

Reflected Cross-Site Scripting (XSS)

Affected configurations

Nvd

Node

citrixnetscaler_application_delivery_controllerRange12.1–12.1-55.297fips

citrixnetscaler_application_delivery_controllerRange12.1–12.1-55.297ndcpp

citrixnetscaler_application_delivery_controllerRange13.0–13.0-91.13-

citrixnetscaler_application_delivery_controllerRange13.1–13.1-37.159fips

citrixnetscaler_application_delivery_controllerRange13.1–13.1-49.13-

citrixnetscaler_application_delivery_controllerMatch11.1-65.22fips

citrixnetscaler_gatewayRange13.0–13.0-91.13

citrixnetscaler_gatewayRange13.1–13.1-49.13

VendorProductVersionCPE
citrixnetscaler_application_delivery_controller*cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*
citrixnetscaler_application_delivery_controller*cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*
citrixnetscaler_application_delivery_controller*cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*
citrixnetscaler_application_delivery_controller11.1-65.22cpe:2.3:a:citrix:netscaler_application_delivery_controller:11.1-65.22:*:*:*:fips:*:*:*
citrixnetscaler_gateway*cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	netscaler_application_delivery_controller	*	cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::fips:::*
citrix	netscaler_application_delivery_controller	*	cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::ndcpp:::*
citrix	netscaler_application_delivery_controller	*	cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::-:::*
citrix	netscaler_application_delivery_controller	11.1-65.22	cpe:2.3:a:citrix:netscaler_application_delivery_controller:11.1-65.22::::fips:::
citrix	netscaler_gateway	*	cpe:2.3:a:citrix:netscaler_gateway::::::::