CVE-2020-8191: XSS

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-8191.

Q: What is the severity of CVE-2020-8191?

The severity of CVE-2020-8191 is medium, with a severity value of 6.1.

Q: What is the affected software for CVE-2020-8191?

The affected software for CVE-2020-8191 includes Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18, as well as Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d, and 10.2.7.

Q: What is the vulnerability description for CVE-2020-8191?

CVE-2020-8191 is an improper input validation vulnerability in Citrix ADC and Citrix Gateway that allows reflected Cross Site Scripting (XSS).

Q: How can I fix CVE-2020-8191?

To fix CVE-2020-8191, it is recommended to update to the patched versions of Citrix ADC and Citrix Gateway (13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, or 10.5-70.18) and Citrix SDWAN WAN-OP (11.1.1a, 11.0.3d, or 10.2.7).

Published Jul 10, 2020

Updated

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting (XSS).

Affected Software

20 affected components

Citrix Application Delivery Controller Firmware>=10.5<10.5-70.18

Citrix Application Delivery Controller Firmware>=11.1<11.1-64.14

Citrix Application Delivery Controller Firmware>=12.0<12.0-63.21

Citrix Application Delivery Controller Firmware>=12.1<12.1-57.18

Citrix Application Delivery Controller Firmware>=13.0<13.0-58.30

Citrix Application Delivery Controller

Citrix Netscaler Gateway Firmware>=10.5<10.5-70.18

Citrix Netscaler Gateway Firmware>=11.1<11.1-64.14

Citrix Netscaler Gateway Firmware>=12.0<12.0-63.21

Citrix Netscaler Gateway Firmware>=12.1<12.1-57.18

Citrix NetScaler Gateway

Citrix Gateway Firmware>=13.0<13.0-58.30

Citrix Gateway

Citrix SD-WAN WANOP>=10.2<10.2.7

Citrix SD-WAN WANOP>=11.0<11.0.3d

Citrix SD-WAN WANOP>=11.1<11.1.1a

Citrix 4000-WO

Citrix 4100-WO

Citrix 5000-WO

Citrix 5100-WO

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Citrix ADC and Citrix Gateway to a version that resolves this vulnerability.
Fixed in 13.0-58.30
Upgrade
Upgrade Citrix ADC and Citrix Gateway to a version that resolves this vulnerability.
Fixed in 12.1-57.18
Upgrade
Upgrade Citrix ADC and Citrix Gateway to a version that resolves this vulnerability.
Fixed in 12.0-63.21
Upgrade
Upgrade Citrix ADC and Citrix Gateway to a version that resolves this vulnerability.
Fixed in 11.1-64.14
Upgrade
Upgrade Citrix ADC and Citrix Gateway to a version that resolves this vulnerability.
Fixed in 10.5-70.18
Upgrade
Upgrade Citrix SDWAN WAN-OP to a version that resolves this vulnerability.
Fixed in 11.1.1a
Upgrade
Upgrade Citrix SDWAN WAN-OP to a version that resolves this vulnerability.
Fixed in 11.0.3d
Upgrade
Upgrade Citrix SDWAN WAN-OP to a version that resolves this vulnerability.
Fixed in 10.2.7

Event History

Jul 10, 2020

CVE Published

via MITRE·03:38 PM

Data Sourced

via MITRE·03:38 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-8191.

What is the severity of CVE-2020-8191?