CVE-2013-6944: XSS
Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6944?
CVE-2013-6944 is classified as a medium severity vulnerability due to its potential impact on web security.
How do I fix CVE-2013-6944?
To fix CVE-2013-6944, update to Citrix NetScaler Application Delivery Controller firmware version 9.3-64.4, 10.0-77.5, or 10.1-118.7 or later.
What systems are affected by CVE-2013-6944?
CVE-2013-6944 affects Citrix NetScaler Application Delivery Controller versions 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7.
What kind of attack does CVE-2013-6944 allow?
CVE-2013-6944 allows remote attackers to perform cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML.
What is the impact of CVE-2013-6944 on web applications?
CVE-2013-6944 can lead to unauthorized actions on behalf of users, data theft, and a compromised user experience on affected web applications.