vulnerability

Citrix Gateway/Application Delivery Controller: CVE-2023-3466: Reflected Cross-Site Scripting (XSS)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:H/Au:N/C:C/I:C/A:C)

Published

Jul 18, 2023

Added

Jul 18, 2023

Modified

May 14, 2026

Description

A vulnerability has been discovered in Citrix Gateway and Citrix ADC (formerly known as NetScaler ADC), that, if exploited, could allow an unauthenticated remote attacker to perform Reflected Cross-Site Scripting (XSS) on the appliance.

Solution

citrix-adc-upgrade-latest

References

CVE-2023-3466
https://attackerkb.com/topics/CVE-2023-3466
https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report