CVE-2023-24488CWE-79

Cross site scripting

Medium · published July 10, 2023

Patch now

High probability of exploitation

CVSS calls it medium at 6.1. It sits in the 99.6th percentile for exploit probability.

CVSS v3.1

6.1

EPSS

81%

Percentile

99.6

In the wild

Unconfirmed

What it is

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting

The record

Technical detail

CVSS v3.1: 6.1 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.81169 · 99.6th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2023-07-10T20:41Z

EPSS history

Timeline