Cloud Software Group

Products

ProductCVEsExploitedLatest
NetScaler ADC32Jan 17, 2024
NetScaler Gateway21Jan 17, 2024
Citrix Session Recording1–Jan 18, 2024
Citrix StoreFront1–Jan 17, 2024

Exploited and recent CVEs

  • CVE-2023-6549 High 8.2 Exploited Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read 57.6%
  • CVE-2023-6548 Medium 5.5 Exploited Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated 3.2%
  • CVE-2023-6548 Medium 5.5 Exploited Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated 3.2%
  • CVE-2023-6184 Medium 5.0 Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting 46.9%
  • CVE-2023-5914 Medium 5.4   Cross-site scripting (XSS) 75.5%
  • CVE-2023-4967 High 8.2 Denial of service 1.0%
  • CVE-2023-4967 High 8.2 Denial of service 1.0%