CVE-2023-3466

—

CVSS 3.1

6.1 medium

EPSS

3%p85

Published

Jul 19, 2023 (Jul 19, 2023)

Modified

Jun 17, 2026

Description

Reflected Cross-Site Scripting (XSS)

Vendors: citrix
Products: netscaler application delivery controller, netscaler gateway
Weakness: CWE-20, CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news6 stories

Hundreds of Citrix Endpoints Compromised With Webshells

Infosecurity MagazineAug 3, 10:00 UTC · Aug 3, 2023Exploit / PoC CVE-2023-3519 CVE-2023-3466 CVE-2023-3467

60

Thousands of Citrix Servers Exposed to Zero

Infosecurity MagazineJul 24, 10:00 UTC · Jul 24, 2023Exploit / PoC CVE-2023-3519 CVE-2023-3466 CVE-2023-3467

60

Week in review: VirusTotal data leak, Citrix NetScaler zero-day exploitation

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-29298 CVE-2023-38203+3 CVEs

60

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway

The Hacker NewsJul 22, 03:57 UTC · Jul 22, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+3 CVEs

60

Citrix warns of actively exploited zero

Security AffairsJul 21, 19:35 UTC · Jul 21, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467

60

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

Help Net SecurityJul 21, 11:15 UTC · Jul 21, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+2 CVEs

60