CVE-2018-6811

Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.

• CWE-79

• http://www.securitytracker.com/id/1040440Third Party Advisory, VDB Entry
• https://support.citrix.com/article/CTX232161Patch, Vendor Advisory
• http://www.securitytracker.com/id/1040440Third Party Advisory, VDB Entry
• https://support.citrix.com/article/CTX232161Patch, Vendor Advisory

Published

Mar 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6798An issue was discovered in Perl 5.22 through 5.26. Matching …
• CVE-2018-6799The AcquireCacheNexus function in magick/pixel_cache.c in Gr…
• CVE-2018-6806Marked 2 through 2.5.11 allows remote attackers to read arbi…6.5
• CVE-2018-6808NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gate…
• CVE-2018-6809NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gate…
• CVE-2018-6810Directory traversal vulnerability in NetScaler ADC 10.5, 11.…
• CVE-2018-6817Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-6818Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-6819Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-6820Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-6821Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-6822In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implement…