Vulnerability Details CVE-2016-9028
Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 5.8
References
Products affected by CVE-2016-9028
-
cpe:2.3:h:citrix:netscaler_application_delivery_controller:-
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0.e
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.0
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.1
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.2
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3(1)
-
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e