Citrix Application Delivery Controller vulnerabilities, page 2
34 vulnerabilities
Known vulnerabilities in Citrix Application Delivery Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-27513citrixapplication_delivery_controller+2
EPSS score0.30%
Remote desktop takeover via phishingCVE-2022-27508citirxcitrix application delivery controller (citrix adc) and citrix gateway+2EPSS score1.01%
Unauthenticated denial of serviceCVE-2022-27518citrixapplication_delivery_controller+2KEVEPSS score6.86%
Unauthenticated remote arbitrary code executionCVE-2022-27510citrixapplication_delivery_controller+2EPSS score1.12%
Unauthorized access to Gateway user capabilitiesCVE-2022-27509citirxcitrix application delivery management (citrix adc) and citrix gateway+2EPSS score0.54%
Unauthenticated redirection to a malicious websiteCVE-2022-27507citirxcitrix application delivery controller (citrix adc) and citrix gateway+2EPSS score0.98%
Authenticated denial of serviceCVE-2017-14602citrixapplication_delivery_controller+1EPSS score2.42%
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.CVE-2017-17549citrixapplication_delivery_controller+1EPSS score1.57%
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensitive information from the backend client TLS handshake by leveraging use of TLS with Client Certificates and a Diffie-Hellman Ephemeral (DHE) key exchange.CVE-2017-17382citrixapplication_delivery_controller+1EPSS score13.88%
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.CVE-2019-19781citrixapplication_delivery_controller+2KEVRansomwareEPSS score100.00%
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.CVE-2019-18225citrixapplication_delivery_controller+2EPSS score1.51%
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name.CVE-2019-18177citrixapplication_delivery_controller+1EPSS score0.59%
In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.CVE-2023-24488citrixapplication_delivery_controller+2EPSS score80.91%
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scriptingCVE-2023-24487citrixapplication_delivery_controller+2EPSS score1.07%
Arbitrary file read in Citrix ADC and Citrix Gateway