Read the docs

Citrix

Records419All Threatist records
Exploited (KEV)29In CISA KEV
CVSS critical87CVSS 9.0–10.0
CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

31 records in Netscaler Gateway Firmware · all components

Priority CRITICAL 86KEV

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in li…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.33029 Published 2020-07-10 No fix listed CWE-20
Priority CRITICAL 86KEV

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenti…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.88269 Published 2020-07-10 No fix listed CWE-284
Priority HIGH 77KEV

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.26333 Published 2020-07-10 No fix listed CWE-284
Priority MEDIUM 48

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflecte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.23461 Published 2020-07-10 No fix listed CWE-79
Priority MEDIUM 46

A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows a remote authenticated attacker to run arbitrary commands vi…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04856 Published 2017-04-13 No fix listed CWE-119
Priority MEDIUM 46

The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated user…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03938 Published 2015-07-16 No fix listed CWE-77
Priority MEDIUM 42

Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access to execute arbitrary c…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01819 Published 2020-07-10 No fix listed
Priority MEDIUM 42

Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the modif…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.10834 Published 2020-07-10 No fix listed CWE-94
Priority MEDIUM 41

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.13877 Published 2017-12-13 No fix listed CWE-327
Priority MEDIUM 40

Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04356 Published 2018-03-06 No fix listed CWE-22
Priority LOW 37

Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01949 Published 2020-07-10 No fix listed CWE-20
Priority LOW 36

A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02415 Published 2017-09-26 No fix listed CWE-287
Priority LOW 30

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensiti…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01571 Published 2017-12-13 No fix listed CWE-200
Priority LOW 29

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in St…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00972 Published 2020-07-10 No fix listed CWE-79
Load more
Open these records in search →