Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

19 records

Vendor: Citrix Component: Gateway Clear all filters
TI-2023-10109 CVE-2023-24488 · GHSA-9p94-mp85-fwj9

Cross site scripting in Citrix ADC and Citrix Gateway

Priority HIGH 68

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.81169 Published 2023-07-10 Fixed in 13.1-45.61 , 13.0-90.11  +3 CWE-79
TI-2022-10526 CVE-2022-27513 · GHSA-wpwp-xm62-5w5w

Remote desktop takeover via phishing

Priority MEDIUM 41

Remote desktop takeover via phishing

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00347 Published 2022-11-08 No fix listed CWE-345
TI-2021-05817 CVE-2021-22956 · GHSA-cvqf-ghwg-56gj

Uncontrolled resource consumption in Citrix ADC, Citrix Gateway, Citrix SDWAN

Priority LOW 35

An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a tempora…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2021-12-07 No fix listed CWE-400
TI-2021-05816 CVE-2021-22955 · GHSA-xwgf-rg8j-2j5x

Uncontrolled resource consumption in Citrix ADC, Citrix Gateway

Priority LOW 35

A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary disrupt…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2021-12-07 No fix listed CWE-400
TI-2021-05781 CVE-2021-22920 · GHSA-5w66-9x5w-m57v

Improper access control in Citrix ADC, Citrix Gateway

Priority LOW 31

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00918 Published 2021-08-05 No fix listed CWE-284
TI-2021-05780 CVE-2021-22919 · GHSA-8v5q-r6pr-xg3j

Resource allocation without limits in Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP

Priority LOW 35

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0094 Published 2021-08-05 No fix listed CWE-770
TI-2021-05788 CVE-2021-22927 · GHSA-j95v-2qpj-v897

Session fixation in Citrix ADC, Citrix Gateway

Priority LOW 37

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00838 Published 2021-08-05 No fix listed CWE-384
TI-2020-06716 CVE-2020-8299 · GHSA-xvx2-hw78-h573

Uncontrolled resource consumption in Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP…

Priority LOW 29

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a s…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00385 Published 2021-06-16 No fix listed CWE-400
TI-2020-06717 CVE-2020-8300 · GHSA-pq9q-4fcv-7rvj

Improper access control in Citrix ADC, Citrix Gateway

Priority LOW 34

Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing att…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02997 Published 2021-06-16 No fix listed CWE-284
TI-2020-06665 CVE-2020-8247 · GHSA-3fgp-p3x8-6r59

Improper privilege management in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority MEDIUM 41

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gate…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01353 Published 2020-09-18 No fix listed CWE-269
TI-2020-06664 CVE-2020-8246 · GHSA-5wpp-rjjg-p4xh

Uncontrolled resource consumption in Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP

Priority LOW 36

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gate…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01555 Published 2020-09-18 No fix listed CWE-400
TI-2020-06663 CVE-2020-8245 · GHSA-62vx-hh36-4mpq

Cross-site scripting in Citrix ADC, Citrix Gateway

Priority LOW 29

Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0,…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00934 Published 2020-09-18 No fix listed CWE-79