Description
Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (9)
Core 9
Core References
Various Sources x_refsource_misc
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030573
Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX140863
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/94493
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59942
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Jul/77
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030572
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/532802/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/68535
Scores
EPSS
0.0083
EPSS Percentile
74.8%
Details
CWE
CWE-79
Status
published
Products (4)
citrix/netscaler_access_gateway
citrix/netscaler_access_gateway_firmware
10.1
citrix/netscaler_application_delivery_controller
citrix/netscaler_application_delivery_controller_firmware
10.1
Published
Jul 16, 2014
Tracked Since
Feb 18, 2026