CVE-2016-2789: XSS

Published Apr 7, 2016

Updated

Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

3 affected components

Citrix XenMobile Server=10.0

Citrix XenMobile Server=10.1

Citrix XenMobile Server=10.3

Remediation

Patch Available

http://support.citrix.com/article/CTX207499

Event History

Apr 7, 2016

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-2789?

CVE-2016-2789 is a cross-site scripting (XSS) vulnerability classified as high severity due to its potential for exploitation.

How do I fix CVE-2016-2789?

To fix CVE-2016-2789, upgrade Citrix XenMobile Server to 10.0 Rolling Patch 4, 10.1 Rolling Patch 4, or 10.3 Rolling Patch 1 or later.

What versions of Citrix XenMobile Server are affected by CVE-2016-2789?

CVE-2016-2789 affects Citrix XenMobile Server versions 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1.

Can CVE-2016-2789 be exploited remotely?

Yes, CVE-2016-2789 can be exploited remotely by attackers through the Web User Interface.

What type of vulnerability is CVE-2016-2789?

CVE-2016-2789 is classified as a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.