CVE-2022-27509: Unauthenticated redirection to a malicious website

PriorityP428medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.38%

29.5th percentile

Unauthenticated redirection to a malicious website

Affected

13 ranges

Vendor	Product	Version range	Fixed in
citirx	citrix_application_delivery_management_and_citrix_gateway	>= 12.1 < 65.15	65.15
citirx	citrix_application_delivery_management_and_citrix_gateway	>= 13.0 < 86.17	86.17
citirx	citrix_application_delivery_management_and_citrix_gateway	>= 13.1 < 24.38	24.38
citrix	application_delivery_controller_firmware	>= 12.1 < 12.1-65.15	12.1-65.15
citrix	application_delivery_controller_firmware	>= 12.1 < 12.1-55.282	12.1-55.282
citrix	application_delivery_controller_firmware	>= 13.0 < 13.0-86.17	13.0-86.17
citrix	application_delivery_controller_firmware	>= 13.1 < 13.1-24.38	13.1-24.38
citrix	citrix_adc	—	—
citrix	citrix_gateway	—	—
citrix	gateway	>= 12.1 < 12.1-65.15	12.1-65.15
citrix	gateway	>= 13.0 < 13.0-86.17	13.0-86.17
citrix	gateway	>= 13.1 < 13.1-24.38	13.1-24.38
citrix	xenserver	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.