Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2015-2841

EPSS 4.41% · P89
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-2841

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the application/octet-stream and text/xml Content-Types.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Citrix Systems NetScaler AppFirewall 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Citrix Systems NetScaler AppFirewall是美国思杰系统(Citrix Systems)公司的一款多功能Web应用防火墙。 NetScaler 10.5版本中使用的Citrix Systems NetScaler AppFirewall中存在安全漏洞。远程攻击者可借助特制的Content-Type头利用该漏洞绕过既定的防火墙限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2015-2841

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-2841

登录查看更多情报信息。

Same Patch Batch · n/a · 2015-04-03 · 27 CVEs total

CVE-2015-0684Cisco Unified Communications Domain Manager SQL注入漏洞
CVE-2015-0687Cisco IOS SNMP 拒绝服务漏洞
CVE-2015-0686Cisco NX-OS 拒绝服务漏洞
CVE-2015-0685Cisco IOS XE 输入验证漏洞
CVE-2015-0995Inductive Automation Ignition 信任管理漏洞
CVE-2015-0994Inductive Automation Ignition 安全漏洞
CVE-2015-0993Inductive Automation Ignition 安全漏洞
CVE-2015-0992Inductive Automation Ignition 信息泄露漏洞
CVE-2015-0991Inductive Automation Ignition 信息泄露漏洞
CVE-2015-0990Ecava IntegraXor SCADA Server 不可信搜索路径漏洞
CVE-2015-0976Inductive Automation Ignition 跨站脚本漏洞
CVE-2015-0903Hidemaru Saitoh Kikaku Maruo Editor 缓冲区溢出漏洞
CVE-2015-0902WordPress One SEO Pack插件信息泄露漏洞
CVE-2015-0612Cisco Unity Connection Conversation Manager 拒绝服务漏洞
CVE-2015-0683Cisco Unified Communications Domain Manager 信息泄露漏洞
CVE-2015-0682Cisco Unified Communications Domain Manager 权限许可和访问控制漏洞
CVE-2015-0666Cisco Prime Data Center Network Manager 路径遍历漏洞
CVE-2014-8390Schneider Electric VAMPSET 缓冲区溢出漏洞
CVE-2015-2840Citrix Systems NetScaler 跨站脚本漏洞
CVE-2015-2839Citrix Systems NetScaler Nitro API 跨站脚本漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2015-2841

No comments yet


Leave a comment