CVE-2015-6672: XSS
First published: Thu Sep 17 2015(Updated: )
Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix Application Delivery Controller Firmware | =10.1 | |
| Citrix Application Delivery Controller Firmware | =10.5 | |
| Citrix Application Delivery Controller Firmware | =10.5e | |
| Citrix Netscaler Gateway Firmware | =10.1 | |
| Citrix Netscaler Gateway Firmware | =10.5 | |
| Citrix Netscaler Gateway Firmware | =10.5e |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2015-6672?
CVE-2015-6672 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-6672?
To fix CVE-2015-6672, upgrade to Citrix NetScaler Application Delivery Controller or Gateway versions 10.1 Build 132.8, 10.5 Build 57.7, or 10.5e Build 56.1505.e or later.
What types of systems are affected by CVE-2015-6672?
CVE-2015-6672 affects Citrix NetScaler Application Delivery Controller Firmware and NetScaler Gateway Firmware versions below the specified builds.
What attacks can be performed using CVE-2015-6672?
CVE-2015-6672 allows remote attackers to inject arbitrary web scripts or HTML into the Administrative Web Interface.
Is CVE-2015-6672 exploitable remotely?
Yes, CVE-2015-6672 can be exploited remotely due to vulnerabilities in the web interface.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/citrix
- canonical/citrix application delivery controller firmware
- version/citrix application delivery controller firmware/10.1
- version/citrix application delivery controller firmware/10.5
- version/citrix application delivery controller firmware/10.5e
- canonical/citrix netscaler gateway firmware
- version/citrix netscaler gateway firmware/10.1
- version/citrix netscaler gateway firmware/10.5
- version/citrix netscaler gateway firmware/10.5e