PT-2016-5220 · Citrix · Citrix Xenmobile Server

Publicado 2016-04-07 · Atualizado 2016-12-03 · CVE-2016-2789

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.0, 10.1 through 10.1 before Rolling Patch 4, 10.3 through 10.3 before Rolling Patch 1

Description A cross-site scripting (XSS) issue exists in the Web User Interface of Citrix XenMobile Server, allowing remote attackers to inject arbitrary web script or HTML.

Recommendations For version 10.0, apply the necessary patches or updates to fix the issue. For version 10.1, apply Rolling Patch 4 or later to resolve the issue. For version 10.3, apply Rolling Patch 1 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-2789

Produtos afetados

Citrix Xenmobile Server

Referências · 4

• http://support.citrix.com/article/CTX207499 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-2789 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2789 · Nota de Segurança
• http://securitytracker.com/id/1035265 · Nota