CVE-2015-2839

概要

参考情報

• packetstormsecurity.com/files/130931/Citrix-NITRO-SDK-xen_hotfix-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Mar/128
• securityfocus.com/archive/1/534935/100/0/threaded
• securityfocus.com/bid/73311
• securify.nl/advisory/SFY20140805/citrix_nitro_sdk_xen_hotfix_page_is_vulnerable_to_cross_site_scripting.html · Exploit

netscaler のその他の脆弱性

• CVE-2018-6186高 8.8Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp …
• CVE-2016-2072中 6.1The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.3…
• CVE-2016-2071緊急 9.8Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and…
• CVE-2015-2841中 5.0Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Cont…
• CVE-2015-2840中 4.3Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers t…