CVE-2018-6811

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-06 · updated 2026-06-17
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.

Affected products

Citrix Netscaler Application Delivery Controller Firmware: 10.5, 11.0, 11.1, 12.0 (and their updates)
Citrix Netscaler Gateway Firmware: 10.5, 11.0, 11.1, 12.0 (and their updates)

References

http://www.securitytracker.com/id/1040440
https://support.citrix.com/article/CTX232161
http://www.securitytracker.com/id/1040440
https://support.citrix.com/article/CTX232161

Get alerted when CVE-2018-6811 or the next vulnerability affects your stack