CVE-2018-18517

published 2018-10-24

CVE-2018-18517: Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS.

Priority P4 20 medium 4.8 CVSS 3.0

AV N AC L PR H UI R S C C L I L A N

Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
citrix	citrix_adm	—	—
citrix	citrix_hypervisor	—	—
citrix	citrix_virtual_apps_and_desktops	—	—
citrix	endpoint_management	—	—
citrix	netscaler_adc	—	—
citrix	netscaler_adc_gateway	—	—
citrix	netscaler_gateway	—	—
citrix	netscaler_gateway_firmware	>= 10.5.0 < 10.5.69.003	10.5.69.003
citrix	netscaler_gateway_firmware	>= 11.1.0 < 11.1.59.004	11.1.59.004
citrix	netscaler_gateway_firmware	>= 12.0.0 < 12.0.58.7	12.0.58.7
citrix	netscaler_gateway_firmware	>= 12.1.0 < 12.1.49.1	12.1.49.1
citrix	xenserver	—	—

CVSS provenance

nvd v3.0 4.8 MEDIUM CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

nvd v2.0 3.5 LOW AV:N/AC:M/Au:S/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79