« Volver al listado

CVE-2022-27503

Estado: ModificadaMedia (6.1)—

Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Citrix — Storefront Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-27503",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@citrix.com",
      "affectedData": [
        {
          "vendor": "Citrix",
          "product": "StoreFront",
          "versions": [
            {
              "status": "affected",
              "version": "1912",
              "lessThan": "CU5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "3.12",
              "lessThan": "CU9",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-04-13T18:15:14.173",
  "references": [
    {
      "url": "https://support.citrix.com/article/CTX377814",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@citrix.com"
    },
    {
      "url": "https://support.citrix.com/article/CTX377814",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@citrix.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9"
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de tipo Cross-site Scripting (XSS) en Citrix StoreFront afecta a la versión 1912 anterior a CU5 y versión 3.12 anterior a CU9"
    }
  ],
  "lastModified": "2026-06-17T04:37:08.360",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:citrix:storefront_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5C33073-2984-4006-8617-D8F96B917C52",
              "versionEndExcluding": "3.12.9000",
              "versionStartIncluding": "3.12"
            },
            {
              "criteria": "cpe:2.3:a:citrix:storefront_server:*:*:*:*:ltsr:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF176A97-1002-4763-9EFE-250F89B22569",
              "versionEndExcluding": "1912.0.5000",
              "versionStartIncluding": "1912"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@citrix.com"
}