NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-3466

CVSS 3.1: 6.1 medium
EPSS: 3%p85
Published: Jul 19, 2023 · Jul 19, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-3466 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Reflected Cross-Site Scripting (XSS)

Vendors: citrix

Products: netscaler application delivery controller, netscaler gateway

Weakness: CWE-20, CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news

6 stories

Hundreds of Citrix Endpoints Compromised With Webshells

Infosecurity MagazineAug 3, 10:00 UTC · Aug 3, 2023Exploit / PoCCVE-2023-3519 CVE-2023-3466 CVE-2023-34673

60

Thousands of Citrix Servers Exposed to Zero

Infosecurity MagazineJul 24, 10:00 UTC · Jul 24, 2023Exploit / PoCCVE-2023-3519 CVE-2023-3466 CVE-2023-34673

60

Week in review: VirusTotal data leak, Citrix NetScaler zero-day exploitation

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2023Exploit / PoCExploitedCVE-2023-3519 CVE-2023-29298 CVE-2023-38203+33

60

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway

The Hacker NewsJul 22, 03:57 UTC · Jul 22, 2023Exploit / PoCExploitedCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+33 · 1 read

60

Citrix warns of actively exploited zero

Security AffairsJul 21, 19:35 UTC · Jul 21, 2023Exploit / PoCExploitedCVE-2023-3519 CVE-2023-3466 CVE-2023-34674 · 1 read

60

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

Help Net SecurityJul 21, 11:15 UTC · Jul 21, 2023Exploit / PoCExploitedCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+22 · 1 read

60