Search/CVE-2015-6672
● CVE

CVE-2015-6672

VendorcitrixProductnetscaler application delivery controller firmware, netscaler gateway firmwareDiscoveredSep 17, 2015UpdatedMay 6, 2026

Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

View graph Watch Export
CVSS v3.1
—
EPSS
1.43%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
3 relationships
Timeline
disclosure → media coverage
Sep 17, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026