Unscored severity · published Nov 20, 2007
CVE-2007-6037
Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the…
–
CVSS
3.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter and other unspecified parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
NetScaler ADC · Citrix
8.0_build_47.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6037
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6037
osvdb.org
http://osvdb.org/39009
secunia.com
http://secunia.com/advisories/27726
securityreason.com
http://securityreason.com/securityalert/3377
www.securityfocus.com
http://www.securityfocus.com/archive/1/483920/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26491
www.securitytracker.com
http://www.securitytracker.com/id?1018981
More from NetScaler ADC
9.8
CVE-2026-88771
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
9.8
CVE-2026-19490
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
9.8
CVE-2026-8452
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
9.8
CVE-2026-3055
Insufficient input validation leading to memory overread
9.8
CVE-2025-7775
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service