Lucene search

[email protected]CVE-2023-24488

HistoryJul 10, 2023 - 9:15 p.m.

CVE-2023-24488

2023-07-1021:15:10

CWE-79

[email protected]

web.nvd.nist.gov

709

cve-2023-24488

cross site scripting

citrix adc

citrix gateway

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.052 Low

EPSS

Percentile

93.0%

JSON

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting

CPENameOperatorVersion
citrix:gatewaycitrix gatewaylt12.1-65.35
citrix:gatewaycitrix gatewayeq12.1-62.27
citrix:gatewaycitrix gatewayeq12.1-62.25
citrix:gatewaycitrix gatewayeq12.1-64.16
citrix:gatewaycitrix gatewayeq12.1-64.17
citrix:gatewaycitrix gatewayeq12.1-61.18
citrix:gatewaycitrix gatewayeq12.1
citrix:gatewaycitrix gatewaylt13.0-90.11
citrix:gatewaycitrix gatewayeq13.0-64.35
citrix:gatewaycitrix gatewayeq13.0-82.42

CPE	Name	Operator	Version
citrix:gateway	citrix gateway	lt	12.1-65.35
citrix:gateway	citrix gateway	eq	12.1-62.27
citrix:gateway	citrix gateway	eq	12.1-62.25
citrix:gateway	citrix gateway	eq	12.1-64.16
citrix:gateway	citrix gateway	eq	12.1-64.17
citrix:gateway	citrix gateway	eq	12.1-61.18
citrix:gateway	citrix gateway	eq	12.1
citrix:gateway	citrix gateway	lt	13.0-90.11
citrix:gateway	citrix gateway	eq	13.0-64.35
citrix:gateway	citrix gateway	eq	13.0-82.42

Rows per page:

1-10 of 181

References

support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.052 Low

EPSS

Percentile

93.0%

JSON

Related for CVE-2023-24488

prion1 hackerone1 githubexploit4 nuclei1 cvelist1 nessus1 citrix1