Read the docs

Citrix

Records419All Threatist records
Exploited (KEV)29In CISA KEV
CVSS critical87CVSS 9.0–10.0
CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

29 records in Netscaler Application Delivery Controller Firmware · all components

Priority MEDIUM 46

The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated user…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03938 Published 2015-07-16 No fix listed CWE-77
Priority MEDIUM 42

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of H…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01826 Published 2016-10-28 No fix listed CWE-254
Priority MEDIUM 40

Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04356 Published 2018-03-06 No fix listed CWE-22
Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the aut…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00873 Published 2014-03-10 No fix listed CWE-352
Priority LOW 26

Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allo…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.01513 Published 2014-11-07 No fix listed CWE-264
Priority LOW 26

Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and W…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01622 Published 2014-03-10 No fix listed CWE-94
Priority LOW 25

The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appl…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01023 Published 2015-11-17 No fix listed CWE-200
Priority LOW 25

Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecifie…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01034 Published 2014-03-10 No fix listed CWE-255
Load more
Open these records in search →