Citrix Gateway vulnerabilities, page 2
33 vulnerabilities
Known vulnerabilities in Citrix Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-8195citrixapplication_delivery_controller+4KEV
EPSS score33.03%
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.CVE-2022-27516citrixapplication_delivery_controller+2EPSS score0.67%
User login brute force protection functionality bypassCVE-2022-27513citrixapplication_delivery_controller+2EPSS score0.30%
Remote desktop takeover via phishingCVE-2022-27508citirxcitrix application delivery controller (citrix adc) and citrix gateway+2EPSS score1.01%
Unauthenticated denial of serviceCVE-2022-27518citrixapplication_delivery_controller+2KEVEPSS score6.86%
Unauthenticated remote arbitrary code executionCVE-2022-27510citrixapplication_delivery_controller+2EPSS score1.12%
Unauthorized access to Gateway user capabilitiesCVE-2022-27509citirxcitrix application delivery management (citrix adc) and citrix gateway+2EPSS score0.54%
Unauthenticated redirection to a malicious websiteCVE-2022-27507citirxcitrix application delivery controller (citrix adc) and citrix gateway+2EPSS score0.98%
Authenticated denial of serviceCVE-2019-19781citrixapplication_delivery_controller+2KEVRansomwareEPSS score100.00%
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.CVE-2019-18225citrixapplication_delivery_controller+2EPSS score1.51%
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name.CVE-2019-18177citrixapplication_delivery_controller+1EPSS score0.59%
In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.CVE-2023-24488citrixapplication_delivery_controller+2EPSS score80.91%
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scriptingCVE-2023-24487citrixapplication_delivery_controller+2EPSS score1.07%
Arbitrary file read in Citrix ADC and Citrix Gateway