CVE-2018-6811: XSS
First published: Tue Mar 06 2018(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix Netscaler Application Delivery Controller Firmware | =10.5 | |
| Citrix Netscaler Application Delivery Controller Firmware | =11.0 | |
| Citrix Netscaler Application Delivery Controller Firmware | =11.1 | |
| Citrix Netscaler Application Delivery Controller Firmware | =12.0 | |
| Citrix Netscaler Gateway Firmware | =10.5 | |
| Citrix Netscaler Gateway Firmware | =11.0 | |
| Citrix Netscaler Gateway Firmware | =11.1 | |
| Citrix Netscaler Gateway Firmware | =12.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-6811?
CVE-2018-6811 is a vulnerability that allows remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.
What is the severity of CVE-2018-6811?
CVE-2018-6811 has a severity level of medium (6.1).
Which Citrix NetScaler ADC versions are affected by CVE-2018-6811?
CVE-2018-6811 affects Citrix NetScaler ADC versions 10.5, 11.0, 11.1, and 12.0.
Which Citrix NetScaler Gateway versions are affected by CVE-2018-6811?
CVE-2018-6811 affects Citrix NetScaler Gateway versions 10.5, 11.0, 11.1, and 12.0.
How can I fix CVE-2018-6811?
To fix CVE-2018-6811, it is recommended to apply the security updates provided by Citrix.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/event
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/citrix
- canonical/citrix netscaler application delivery controller firmware
- version/citrix netscaler application delivery controller firmware/10.5
- version/citrix netscaler application delivery controller firmware/11.0
- version/citrix netscaler application delivery controller firmware/11.1
- version/citrix netscaler application delivery controller firmware/12.0
- canonical/citrix netscaler gateway firmware
- version/citrix netscaler gateway firmware/10.5
- version/citrix netscaler gateway firmware/11.0
- version/citrix netscaler gateway firmware/11.1
- version/citrix netscaler gateway firmware/12.0