CVE-2019-6485: citrix netscaler_application_delivery_controller
Vulnerability summary
CVE-2019-6485 is a medium (CVSS 5.9) vulnerability in citrix netscaler_application_delivery_controller. EPSS estimates a 2.31% chance of exploitation in the next 30 days, higher than 83% of scored vulnerabilities.
Timeline
- 22-02-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery Controller (ADC) 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 allow remote attackers to obtain sensitive plaintext information because of a TLS Padding Oracle Vulnerability when CBC-based cipher suites are enabled.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.31%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.31% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Citrix2 products
- netscaler_application_delivery_controller10.5 | 11.0 | 11.1 | 12.0 | 12.1
- netscaler_gateway10.5 | 11.0 | 11.1 | 12.0 | 12.1
1 vendor · 2 products