CVE-2020-8198
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-8198
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in Stored Cross-Site Scripting (XSS).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Citrix Systems Citrix Application Delivery Controller、Gateway和SDWAN WAN-OP 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Citrix Systems Citrix Application Delivery Controller（ADC）等都是美国思杰系统（Citrix Systems）公司的产品。Citrix Application Delivery Controller是一款应用交付控制器。Citrix Systems Gateway（Citrix Systems NetScaler Gateway）是一套安全的远程接入解决方案。Citrix System SDWAN WAN-OP是一款SD-WAN（虚拟软件定义的广域网
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP | Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7 | - |
II. Public POCs for CVE-2020-8198
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-8198
请登录查看更多情报信息。
- https://support.citrix.com/article/CTX276688x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-8198
Same Patch Batch · n/a · 2020-07-10 · 17 CVEs total
| CVE-2020-9260 | Huawei P30和P30 Pro 信息泄露漏洞 | |
| CVE-2020-9258 | Huawei P30 信息泄露漏洞 | |
| CVE-2020-3974 | VMware Fusion、VMware Remote Console和VMware Horizon Client 安全漏洞 | |
| CVE-2020-8190 | Citrix Systems Citrix Application Delivery Controller和Gateway 安全漏洞 | |
| CVE-2020-8187 | Citrix Systems Citrix Application Delivery Controller和Citrix Systems Gateway 输入验证错误漏洞 | |
| CVE-2020-8186 | Devcert 操作系统命令注入漏洞 | |
| CVE-2020-8191 | 多款Citrix Systems产品跨站脚本漏洞 | |
| CVE-2020-8193 | Citrix System SDWAN WAN-OP 授权问题漏洞 | |
| CVE-2020-8194 | Citrix Systems Citrix Application Delivery Controller、Citrix Gateway和Citrix SDWAN WAN-OP 代 | |
| CVE-2020-8195 | Citrix System SDWAN WAN-OP 路径遍历漏洞 | |
| CVE-2020-8196 | Citrix System SDWAN WAN-OP 授权问题漏洞 | |
| CVE-2020-8197 | Citrix Systems Citrix Application Delivery Controller和Gateway 安全漏洞 | |
| CVE-2020-8199 | Citrix Systems Gateway Plug-in 访问控制错误漏洞 | |
| CVE-2020-8181 | Nextcloud Contacts 代码问题漏洞 | |
| CVE-2020-15504 | Sophos XG Firewall SQL注入漏洞 | |
| CVE-2020-6114 | Glacies IceHRM SQL注入漏洞 |
IV. Related Vulnerabilities
Same product: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
Same weakness: CWE-79
- CVE-2026-27964
FacturaScripts: Reflected Cross-Site Scripting (XSS) via Coo - CVE-2026-27737
BigBlueButton has Stored XSS in bbb-playback replay - CVE-2026-45231
DumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fiel - CVE-2026-45494
Microsoft Edge (Chromium-based) Spoofing Vulnerability - CVE-2026-7498
Stored XSS in Basamak Informatics' DernekWeb
V. Comments for CVE-2020-8198
No comments yet