CVE-2015-2840

概要

参考情報

• packetstormsecurity.com/files/130936/Citrix-NetScaler-VPX-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Mar/130
• securityfocus.com/archive/1/534934/100/0/threaded
• securityfocus.com/bid/73342
• securify.nl/advisory/SFY20140807/citrix_netscaler_vpx_help_pages_are_vulnerable_to_cross_site_scripting.html · Exploit

netscaler のその他の脆弱性

• CVE-2018-6186高 8.8Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp …
• CVE-2016-2072中 6.1The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.3…
• CVE-2016-2071緊急 9.8Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and…
• CVE-2015-2841中 5.0Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Cont…
• CVE-2015-2839中 4.3The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remo…