Citrix

Records419All Threatist records

Exploited (KEV)29In CISA KEV

CVSS critical87CVSS 9.0–10.0

CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV

TI-2026-67510 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 95KEV 2026-10-04 TI-2026-60194 Citrix NetScaler Improper Input Validation Vulnerability CRITICAL 100KEV 2026-09-27 TI-2026-60195 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 100KEV 2026-09-27 TI-2026-15872 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 99KEV 2026-09-09 TI-2026-07427 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 95KEV 2026-08-26 TI-2026-02639 Citrix NetScaler Out-of-Bounds Read Vulnerability CRITICAL 99KEV 2026-03-30

Components

Products in the NVD configurations · select one to filter the records

Xenserver 50 records HIGH Netscaler Gateway 42 records CRITICAL Netscaler Application Delivery Controller 40 records CRITICAL Netscaler Gateway Firmware 31 records CRITICAL Application Delivery Controller Firmware 30 records CRITICAL Netscaler Application Delivery Controller Firmware 29 records MEDIUM Xenmobile Server 22 records MEDIUM Gateway 19 records HIGH

Records

14 records in Access Gateway · all components

TI-2011-02535 CVE-2011-2882 · GHSA-cwj2-353m-w5fv

Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in…

HIGH 73

Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to e…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.56368 Published 2011-07-21 No fix listed CWE-119

TI-2010-04292 CVE-2010-4566 · GHSA-9p2p-8259-272j

The web authentication form in the NT4 authentication component in Citrix Access Gateway…

MEDIUM 63

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions bef…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.27795 Published 2011-01-14 No fix listed

TI-2008-02420 CVE-2008-2528 · GHSA-rqv8-g775-rjw3

Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and…

MEDIUM 48

Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain "access to network resources" via unspecif…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02706 Published 2008-06-03 No fix listed CWE-287

TI-2007-03886 CVE-2007-4013 · GHSA-7hh7-mhm5-pgp7

Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2…

MEDIUM 47

Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04234 Published 2007-07-26 No fix listed

TI-2011-02536 CVE-2011-2883 · GHSA-h237-vcw4-4cvv

The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise…

MEDIUM 43

The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificat…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01529 Published 2011-07-21 No fix listed CWE-20

TI-2007-03889 CVE-2007-4017 · GHSA-g35q-w93f-4c48

Cross-site request forgery (CSRF) vulnerability in the web-based administration console…

LOW 38

Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.02493 Published 2007-07-26 No fix listed

TI-2007-03888 CVE-2007-4016 · GHSA-c6f6-fv43-rm9r

Unspecified vulnerability in the client components in Citrix Access Gateway Standard…

LOW 34

Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02205 Published 2007-07-26 No fix listed

TI-2007-03890 CVE-2007-4018 · GHSA-8f3c-mh5h-xmx7

Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect…

LOW 33

Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0131 Published 2007-07-26 No fix listed

TI-2006-06316 CVE-2006-6572 · GHSA-rv56-6633-c83p

Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access…

LOW 32

Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114, when the Browser-Only access feature is enabled, allows remote authe…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01482 Published 2006-12-15 No fix listed

TI-2006-06317 CVE-2006-6573 · GHSA-64g4-232g-4ghc

Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with…

LOW 30

Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control (AAC) 4.2, when deployed on the Access Gateway appliance 4.2 through 4.2.2 allows remote authenticated users t…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01475 Published 2006-12-15 No fix listed

TI-2006-04674 CVE-2006-4846 · GHSA-372j-ghp3-gx46

Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2…

LOW 30

Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown v…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03869 Published 2006-09-19 No fix listed

TI-2007-00011 CVE-2007-0011 · GHSA-ph74-68r2-9xmr

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control)…

LOW 27

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by readin…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02118 Published 2007-11-05 No fix listed CWE-200

TI-2013-02023 CVE-2013-2263 · GHSA-5gfr-52xx-j5jx

Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before…

LOW 26

Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01387 Published 2013-03-19 No fix listed CWE-264

TI-2007-03569 CVE-2007-3679 · GHSA-jr23-4p9p-9p44

The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl…

LOW 23

The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01675 Published 2007-07-25 No fix listed

Open these records in search →

Critical	87
High	154
Medium	163
Low	15
No CVSS	0