Citrix Netscaler Gateway Firmware vulnerabilities
31 known vulnerabilities affecting citrix/netscaler_gateway_firmware.
Total CVEs
31
CISA KEV
4
actively exploited
Public exploits
6
Exploited in wild
6
Severity breakdown
CRITICAL6HIGH9MEDIUM16
Vulnerabilities
Page 2 of 2
CVE-2015-2829P4HIGHCVSS 7.8v10.5v10.5e2015-05-12
CVE-2015-2829 [HIGH] CVE-2015-2829: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service (reboot) via unspecified vectors.
nvd
CVE-2019-6485P4MEDIUMCVSS 5.9v10.5v11.0+3 more2019-02-22
CVE-2019-6485 [MEDIUM] CWE-327 CVE-2019-6485: Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 1
Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery Controller (ADC) 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 allow remote attackers to obtain s
nvd
CVE-2017-17549P4MEDIUMCVSS 5.9v10.5v11.0+2 more2017-12-13
CVE-2017-17549 [MEDIUM] CWE-200 CVE-2017-17549: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensitive information from the backend client TLS handshake by leveraging use of TLS with Client Certificates and a Diffie-Hellman Ephemer
nvd
CVE-2018-6811P4MEDIUMCVSS 6.1v10.5v11.0+2 more2018-03-06
CVE-2018-6811 [MEDIUM] CWE-79 CVE-2018-6811: Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12
Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.
nvd
CVE-2020-8198P4MEDIUMCVSS 6.1≥ 10.5, < 10.5-70.18≥ 11.1, < 11.1-64.14+2 more2020-07-10
CVE-2020-8198 [MEDIUM] CWE-79 CVE-2020-8198: Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 1
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in Stored Cross-Site Scripting (XSS).
nvd
CVE-2014-8580P4MEDIUMCVSS 4.9v10.1.120.1316.ev10.1.121+10 more2014-11-07
CVE-2014-8580 [MEDIUM] CWE-264 CVE-2014-8580: Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11,
Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access "network resources" of other users via unknown vectors.
nvd
CVE-2015-7996P4MEDIUMCVSS 5.0v10.1v10.52015-11-17
CVE-2015-7996 [MEDIUM] CWE-200 CVE-2015-7996: The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before
The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache.
nvd
CVE-2015-7998P4MEDIUMCVSS 5.0v10.1v10.52015-11-17
CVE-2015-7998 [MEDIUM] CWE-200 CVE-2015-7998: The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gatewa
The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allows attackers to obtain sensitive information via unspecified vectors.
nvd
CVE-2018-18517P4MEDIUMCVSS 4.8≥ 10.5.0, < 10.5.69.003≥ 11.1.0, < 11.1.59.004+2 more2018-10-24
CVE-2018-18517 [MEDIUM] CWE-79 CVE-2018-18517: Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58
Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS.
nvd
CVE-2015-7997P4MEDIUMCVSS 4.3v10.1v10.52015-11-17
CVE-2015-7997 [MEDIUM] CWE-79 CVE-2015-7997: Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application
Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow remote attackers to inject arbitrary web script or
nvd
CVE-2015-6672P4MEDIUMCVSS 4.3v10.1v10.5+1 more2015-09-17
CVE-2015-6672 [MEDIUM] CWE-79 CVE-2015-6672: Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler App
Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
← Previous2 / 2