VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 17, 2015· Updated Jun 17, 2026

CVE-2015-6672

CVE-2015-6672

Description

Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

8
  • Citrix Systems/Netscaler Application Delivery Controller Firmware3 versions
    cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*
    • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*
    • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*
  • Citrix Systems/Netscaler Gateway Firmware4 versions
    cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*
    • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*
    • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*
    • (no CPE)range: <10.1 Build 132.8
  • Citrix Systems/Netscaler Application Delivery Controllerllm-fuzzy
    Range: <10.1 Build 132.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.