Detections
Analytics
Citrix NetScaler Multiple Vulnerabilities (CTX140863)
medium Nessus Plugin ID 76916
Language:
Synopsis
The remote device is affected by multiple vulnerabilities.Description
The remote Citrix NetScaler version is affected by multiple vulnerabilities :- A reflected cross-site-scripting in the administration user interface. (CVE-2014-4346)
- A cookie information disclosure vulnerability.
(CVE-2014-4347)
Solution
Upgrade to Citrix NetScaler 10.1-126.12 or 9.3-62.4 or later.See Also
Plugin Details
Severity: Medium
ID: 76916
File Name: citrix_netscaler_CTX140863.nasl
Version: 1.7
Type: combined
Family: CGI abuses
Published: 7/30/2014
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
CPE: cpe:/o:citrix:netscaler_application_delivery_controller_firmware
Required KB Items: Host/NetScaler/Detected
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/14/2014
Vulnerability Publication Date: 7/14/2014
Reference Information
CVE: CVE-2014-4346, CVE-2014-4347