Lucene search

K
nvd[email protected]NVD:CVE-2023-6184
HistoryJan 18, 2024 - 1:15 a.m.

CVE-2023-6184

2024-01-1801:15:43
CWE-79
CWE-913
web.nvd.nist.gov
citrix} {session recording} {xss} {vulnerability

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

Affected configurations

NVD
Node
citrixvirtual_apps_and_desktopsRange2311-
OR
citrixvirtual_apps_and_desktopsMatch1912-ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu1ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu2ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu3
OR
citrixvirtual_apps_and_desktopsMatch1912cu3ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu4ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu5ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu6ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu7ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203-ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203cu1ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203cu2ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203cu3ltsr

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

Related for NVD:CVE-2023-6184