CVE-2020-8247: citrix application_delivery_controller Improper Privilege Management
Vulnerability summary
CVE-2020-8247 is a high (CVSS 8.8) Improper Privilege Management vulnerability in citrix application_delivery_controller. EPSS estimates a 1.35% chance of exploitation in the next 30 days, higher than 71.1% of scored vulnerabilities.
Timeline
- 18-09-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to escalation of privileges on the management interface.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.35%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
0.00 pp
From 1.35% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Citrix4 products
- application_delivery_controller≥ 11.1, < 11.1-65.12 | ≥ 12.1, < 12.1-58.15 | ≥ 13.0, < 13.0-64.35
- gateway≥ 11.1, < 11.1-65.12 | ≥ 13.0, < 13.0-64.35
- netscaler_gateway≥ 12.1, < 12.1-58.15
- sd-wan_wanop≥ 10.2, < 10.2.7b | ≥ 11.0, < 11.0.3f | ≥ 11.1, < 11.1.2a | ≥ 11.2, < 11.2.1a
1 vendor · 4 products