2 lines
4.6 KiB
JSON
2 lines
4.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC ","vendor":"Citrix","versions":[{"lessThan":"49.13","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"91.13","status":"affected","version":"13.0","versionType":"patch"},{"lessThan":"37.159","status":"affected","version":"13.1-FIPS","versionType":"patch"},{"lessThan":"55.297","status":"affected","version":"12.1-FIPS ","versionType":"patch"},{"lessThan":"55.297","status":"affected","version":"12.1-NDcPP","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"49.13","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"91.13","status":"affected","version":"13.0","versionType":"patch"}]}],"source":"secure@citrix.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","matchCriteriaId":"8927B2FA-F87E-4D81-AC29-9032184ECB7E","versionEndExcluding":"12.1-55.297","versionStartIncluding":"12.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","matchCriteriaId":"9845E7B1-5604-497D-8241-048E91987C13","versionEndExcluding":"12.1-55.297","versionStartIncluding":"12.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","matchCriteriaId":"AD949674-8DC1-4B0D-8C0C-F593539E12F1","versionEndExcluding":"13.0-91.13","versionStartIncluding":"13.0","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","matchCriteriaId":"BD0739E3-F7A4-463C-96B0-9D7BDBF218C4","versionEndExcluding":"13.1-37.159","versionStartIncluding":"13.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","matchCriteriaId":"FCEED8AC-F9A9-4F75-BB32-F53967A8E9A0","versionEndExcluding":"13.1-49.13","versionStartIncluding":"13.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:11.1-65.22:*:*:*:fips:*:*:*","matchCriteriaId":"102C0D0F-AC37-43B0-8B9A-103B37436130","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"BC825A83-8D84-42C7-868F-0470FF79D497","versionEndExcluding":"13.0-91.13","versionStartIncluding":"13.0","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"442F6925-199D-4E5B-84C1-05C4D8108B62","versionEndExcluding":"13.1-49.13","versionStartIncluding":"13.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Reflected Cross-Site Scripting (XSS)\n"}],"id":"CVE-2023-3466","lastModified":"2026-06-17T06:14:09.600","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":6.0,"source":"secure@citrix.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-3466","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-21T21:06:40.290853Z","version":"2.0.3"}}]},"published":"2023-07-19T19:15:12.017","references":[{"source":"secure@citrix.com","tags":["Vendor Advisory"],"url":"https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467"}],"sourceIdentifier":"secure@citrix.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"secure@citrix.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}
|