Read the docs

Citrix

Records419All Threatist records
Exploited (KEV)29In CISA KEV
CVSS critical87CVSS 9.0–10.0
CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV
TI-2026-67510 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 95KEV 2026-10-04TI-2026-60194 Citrix NetScaler Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2026-09-27TI-2026-60195 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 100KEV 2026-09-27TI-2026-15872 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 99KEV 2026-09-09TI-2026-07427 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 95KEV 2026-08-26TI-2026-02639 Citrix NetScaler Out-of-Bounds Read Vulnerability Priority CRITICAL 99KEV 2026-03-30

Components

Products in the NVD configurations · select one to filter the records
Xenserver 50 records HIGH Netscaler Gateway 42 records CRITICAL Netscaler Application Delivery Controller 40 records CRITICAL Netscaler Gateway Firmware 31 records CRITICAL Application Delivery Controller Firmware 30 records CRITICAL Netscaler Application Delivery Controller Firmware 29 records MEDIUM Xenmobile Server 22 records MEDIUM Gateway 19 records HIGH

Records

30 records in Application Delivery Controller Firmware · all components

TI-2020-06613 CVE-2020-8195 · GHSA-jwjc-9cxc-87j8

Improper input validation in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority CRITICAL 86KEV

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in li…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.33029 Published 2020-07-10 No fix listed CWE-20
TI-2020-06611 CVE-2020-8193 · GHSA-wrxp-682m-vm9p

Improper access control in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority CRITICAL 86KEV

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenti…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.88269 Published 2020-07-10 No fix listed CWE-284
TI-2020-06614 CVE-2020-8196 · GHSA-gc2g-58xq-cq5h

Improper access control in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority HIGH 77KEV

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.26333 Published 2020-07-10 No fix listed CWE-284
TI-2020-06609 CVE-2020-8191 · GHSA-h686-q2xf-663f

Cross-site scripting in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority MEDIUM 48

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflecte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.23461 Published 2020-07-10 No fix listed CWE-79
TI-2020-06615 CVE-2020-8197 · GHSA-3pmx-3w59-68p8

Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before…

Priority MEDIUM 42

Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access to execute arbitrary c…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01819 Published 2020-07-10 No fix listed
TI-2020-06612 CVE-2020-8194 · GHSA-v424-6v58-95q3

Code injection in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority MEDIUM 42

Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the modif…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.10834 Published 2020-07-10 No fix listed CWE-94
TI-2022-10526 CVE-2022-27513 · GHSA-wpwp-xm62-5w5w

Remote desktop takeover via phishing

Priority MEDIUM 41

Remote desktop takeover via phishing

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00347 Published 2022-11-08 No fix listed CWE-345
TI-2020-06665 CVE-2020-8247 · GHSA-3fgp-p3x8-6r59

Improper privilege management in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority MEDIUM 41

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gate…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01353 Published 2020-09-18 No fix listed CWE-269
TI-2017-12706 CVE-2017-17382 · GHSA-fwq4-vph9-wfm2

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before…

Priority MEDIUM 41

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.13877 Published 2017-12-13 No fix listed CWE-327
TI-2021-05788 CVE-2021-22927 · GHSA-j95v-2qpj-v897

Session fixation in Citrix ADC, Citrix Gateway

Priority LOW 37

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00838 Published 2021-08-05 No fix listed CWE-384
TI-2020-06605 CVE-2020-8187 · GHSA-qq2f-8prw-23j6

Improper input validation in Citrix ADC, Citrix Gateway

Priority LOW 37

Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01949 Published 2020-07-10 No fix listed CWE-20
TI-2020-06664 CVE-2020-8246 · GHSA-5wpp-rjjg-p4xh

Uncontrolled resource consumption in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority LOW 36

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gate…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01555 Published 2020-09-18 No fix listed CWE-400
TI-2017-10701 CVE-2017-14602 · GHSA-m34h-9xmf-w4xr

A vulnerability has been identified in the management interface of Citrix NetScaler…

Priority LOW 36

A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02415 Published 2017-09-26 No fix listed CWE-287
TI-2021-05817 CVE-2021-22956 · GHSA-cvqf-ghwg-56gj

Uncontrolled resource consumption in Citrix ADC, Citrix Gateway, Citrix SDWAN

Priority LOW 35

An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a tempora…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2021-12-07 No fix listed CWE-400
TI-2021-05816 CVE-2021-22955 · GHSA-xwgf-rg8j-2j5x

Uncontrolled resource consumption in Citrix ADC, Citrix Gateway

Priority LOW 35

A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary disrupt…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2021-12-07 No fix listed CWE-400
TI-2021-05780 CVE-2021-22919 · GHSA-8v5q-r6pr-xg3j

Resource allocation without limits in Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP

Priority LOW 35

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0094 Published 2021-08-05 No fix listed CWE-770
TI-2020-06717 CVE-2020-8300 · GHSA-pq9q-4fcv-7rvj

Improper access control in Citrix ADC, Citrix Gateway

Priority LOW 34

Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing att…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02997 Published 2021-06-16 No fix listed CWE-284
Load more
Open these records in search →