CVE-2018-6811: XSS
Published Mar 6, 2018
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.
Affected Software
8 affected components
Citrix Netscaler Application Delivery Controller Firmware=10.5
Citrix Netscaler Application Delivery Controller Firmware=11.0
Citrix Netscaler Application Delivery Controller Firmware=11.1
Citrix Netscaler Application Delivery Controller Firmware=12.0
Citrix Netscaler Gateway Firmware=10.5
Citrix Netscaler Gateway Firmware=11.0
Citrix Netscaler Gateway Firmware=11.1
Citrix Netscaler Gateway Firmware=12.0
Remediation
Patch Available
Event History
Mar 6, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2018-6811?
CVE-2018-6811 is a vulnerability that allows remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.
2
What is the severity of CVE-2018-6811?
CVE-2018-6811 has a severity level of medium (6.1).
3
Which Citrix NetScaler ADC versions are affected by CVE-2018-6811?
CVE-2018-6811 affects Citrix NetScaler ADC versions 10.5, 11.0, 11.1, and 12.0.
4
Which Citrix NetScaler Gateway versions are affected by CVE-2018-6811?
CVE-2018-6811 affects Citrix NetScaler Gateway versions 10.5, 11.0, 11.1, and 12.0.
5
How can I fix CVE-2018-6811?
To fix CVE-2018-6811, it is recommended to apply the security updates provided by Citrix.