CVE:CVE-2014-4346
CNNVD:CNNVD-201407-362
Citrix Systems NetScaler Application Delivery Controller（ADC）和NetScaler Gateway（前称Citrix Access Gateway Enterprise Edition）都是美国思杰系统（Citrix Systems）公司的产品。NetScaler ADC是一套服务和应用交付解决方案（应用交付控制器）；NetScaler Gateway是一套安全的远程接入解决方案。
Citrix NetScaler ADC 10.1版本和NetScaler Gateway 10.1版本的管理用户界面存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade citrix netscaler_application_delivery_controller_firmware to a higher version than 10.1,and avoid the version 10.1; Upgrade citrix netscaler_application_delivery_controller to a higher version than -; Upgrade citrix netscaler_access_gateway_firmware to a higher version than 10.1,and avoid the version 10.1; Upgrade citrix netscaler_access_gateway to a higher version than -