KLA10536
Multiple vulnerabilities in Citrix NetScaler

Multiple serious vulnerabilities have been found in Citrix NetScaler. Malicious users can exploit these vulnerabilities to execute or inject arbitrary code and conduct XSS attack.

Below is a complete list of vulnerabilities

1. XSS vulnerability can be exploited remotely via a specially designed search query;
2. CSRF vulnerability and improper Content-Type can be exploited remotely via a specially designed JSON.

Citrix NetScaler versions earlier than 10.5 build 52.3nc

Update to the latest version
Get Citrix NetScaler

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/36442