CVE-2020-8191
10.07.2020, 16:15
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting (XSS).
| Vendor | Product | Version |
|---|---|---|
| citrix | application_delivery_controller_firmware | 10.5 ≤ 𝑥 < 10.5-70.18 |
| citrix | application_delivery_controller_firmware | 11.1 ≤ 𝑥 < 11.1-64.14 |
| citrix | application_delivery_controller_firmware | 12.0 ≤ 𝑥 < 12.0-63.21 |
| citrix | application_delivery_controller_firmware | 12.1 ≤ 𝑥 < 12.1-57.18 |
| citrix | application_delivery_controller_firmware | 13.0 ≤ 𝑥 < 13.0-58.30 |
| citrix | netscaler_gateway_firmware | 10.5 ≤ 𝑥 < 10.5-70.18 |
| citrix | netscaler_gateway_firmware | 11.1 ≤ 𝑥 < 11.1-64.14 |
| citrix | netscaler_gateway_firmware | 12.0 ≤ 𝑥 < 12.0-63.21 |
| citrix | netscaler_gateway_firmware | 12.1 ≤ 𝑥 < 12.1-57.18 |
| citrix | gateway_firmware | 13.0 ≤ 𝑥 < 13.0-58.30 |
| citrix | sd-wan_wanop | 10.2 ≤ 𝑥 < 10.2.7 |
| citrix | sd-wan_wanop | 11.0 ≤ 𝑥 < 11.0.3d |
| citrix | sd-wan_wanop | 11.1 ≤ 𝑥 < 11.1.1a |
𝑥
= Vulnerable software versions