First published: Mon Mar 10 2014(Updated: )
Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Citrix Application Delivery Controller Firmware | =9.3\(1\) | |
Citrix Application Delivery Controller Firmware | =9.3.e | |
Citrix Application Delivery Controller Firmware | =10.0 | |
Citrix Application Delivery Controller Firmware | =10.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-6944 is classified as a medium severity vulnerability due to its potential impact on web security.
To fix CVE-2013-6944, update to Citrix NetScaler Application Delivery Controller firmware version 9.3-64.4, 10.0-77.5, or 10.1-118.7 or later.
CVE-2013-6944 affects Citrix NetScaler Application Delivery Controller versions 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7.
CVE-2013-6944 allows remote attackers to perform cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML.
CVE-2013-6944 can lead to unauthorized actions on behalf of users, data theft, and a compromised user experience on affected web applications.