Vulnerabilities

TI-2021-05817 CVE-2021-22956 · GHSA-cvqf-ghwg-56gj

Uncontrolled resource consumption in Citrix ADC, Citrix Gateway, Citrix SDWAN

LOW 35

An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a tempora…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2021-12-07 No fix listed CWE-400

TI-2020-06690 CVE-2020-8273 · GHSA-2qc4-grg3-rm6f

OS command injection in Citrix SD-WAN Center

MEDIUM 43

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02438 Published 2020-11-16 No fix listed CWE-78

TI-2020-06689 CVE-2020-8272 · GHSA-gvx7-3jhm-q87j

Improper authentication in Citrix SD-WAN Center

LOW 36

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01471 Published 2020-11-16 No fix listed CWE-287

TI-2020-06688 CVE-2020-8271 · GHSA-wmcj-6965-gm4j

Path traversal in Citrix SD-WAN Center

MEDIUM 55

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11084 Published 2020-11-16 No fix listed CWE-23

TI-2019-09725 CVE-2019-12985 · GHSA-3pcr-6mwc-x3p8

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 69

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.39544 Published 2019-07-16 No fix listed CWE-78

TI-2019-09726 CVE-2019-12986 · GHSA-qgp9-j24q-992j

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 69

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.39544 Published 2019-07-16 No fix listed CWE-78

TI-2019-09727 CVE-2019-12987 · GHSA-7658-v6cv-j9vp

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 71

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.42551 Published 2019-07-16 No fix listed CWE-78

TI-2019-09728 CVE-2019-12988 · GHSA-gp3j-hgq7-cg5g

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 71

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.42551 Published 2019-07-16 No fix listed CWE-78

TI-2019-09729 CVE-2019-12989 · GHSA-9q4p-22w8-h32x

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

CRITICAL 100KEV

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.94957 Published 2019-07-16 No fix listed CWE-89

TI-2019-09730 CVE-2019-12990 · GHSA-82hx-pvjj-2m99

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.

HIGH 69

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.39335 Published 2019-07-16 No fix listed CWE-22

TI-2019-09731 CVE-2019-12991 · GHSA-462p-6gjx-6wj6

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

CRITICAL 97KEV

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.74067 Published 2019-07-16 No fix listed CWE-78

TI-2019-09732 CVE-2019-12992 · GHSA-22pp-gfq3-734r

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 69

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.48311 Published 2019-07-16 No fix listed CWE-78

TI-2019-08632 CVE-2019-11550 · GHSA-p53g-mf4j-5xxx

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.

LOW 27

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00582 Published 2019-05-08 No fix listed CWE-295

TI-2018-12439 CVE-2018-17448 · GHSA-p73q-qhqq-4f7g

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler…

MEDIUM 46

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02204 Published 2018-10-23 No fix listed

TI-2018-12438 CVE-2018-17447 · GHSA-3grx-945c-q563

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0…

LOW 37

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01947 Published 2018-10-23 No fix listed CWE-532

TI-2018-12437 CVE-2018-17446 · GHSA-45hj-x6v8-2mjc

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x…

MEDIUM 46

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01962 Published 2018-10-23 No fix listed CWE-89

TI-2018-12436 CVE-2018-17445 · GHSA-595c-jhrq-qhxf

A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN…

MEDIUM 55

A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11059 Published 2018-10-23 No fix listed CWE-77

TI-2018-12435 CVE-2018-17444 · GHSA-6jj8-f22v-2q52

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN…

LOW 39

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03576 Published 2018-10-23 No fix listed CWE-22

Vulnerabilities

Filters