Multiple vulnerabilities in Citrix NetScaler

Description

Multiple serious vulnerabilities have been found in Citrix NetScaler. Malicious users can exploit these vulnerabilities to execute or inject arbitrary code and conduct XSS attack.

Below is a complete list of vulnerabilities

1. XSS vulnerability can be exploited remotely via a specially designed search query;
2. CSRF vulnerability and improper Content-Type can be exploited remotely via a specially designed JSON.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

• Citrix-NetScaler

CVE list

• CVE-2015-2839
  warning
• CVE-2015-2838
  high
• CVE-2015-2840
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com