CVE-2015-6672: XSS
Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6672?
CVE-2015-6672 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-6672?
To fix CVE-2015-6672, upgrade to Citrix NetScaler Application Delivery Controller or Gateway versions 10.1 Build 132.8, 10.5 Build 57.7, or 10.5e Build 56.1505.e or later.
What types of systems are affected by CVE-2015-6672?
CVE-2015-6672 affects Citrix NetScaler Application Delivery Controller Firmware and NetScaler Gateway Firmware versions below the specified builds.
What attacks can be performed using CVE-2015-6672?
CVE-2015-6672 allows remote attackers to inject arbitrary web scripts or HTML into the Administrative Web Interface.
Is CVE-2015-6672 exploitable remotely?
Yes, CVE-2015-6672 can be exploited remotely due to vulnerabilities in the web interface.