{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T09:02:31.000","vulnerabilities":[{"cve":{"id":"CVE-2023-3519","sourceIdentifier":"secure@citrix.com","published":"2023-07-19T18:15:11.513","lastModified":"2026-06-17T06:14:15.877","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Unauthenticated remote code execution"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"Citrix","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"13.1","lessThan":"49.13","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"91.13","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.159","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.297","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.297","versionType":"patch","status":"affected"}]},{"vendor":"Citrix","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"13.1","lessThan":"49.13","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"91.13","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-12-09T05:05:15.372531Z","id":"CVE-2023-3519","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-07-19","cisaActionDue":"2023-08-09","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.297","matchCriteriaId":"8927B2FA-F87E-4D81-AC29-9032184ECB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.297","matchCriteriaId":"9845E7B1-5604-497D-8241-048E91987C13"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-91.13","matchCriteriaId":"AD949674-8DC1-4B0D-8C0C-F593539E12F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.159","matchCriteriaId":"BD0739E3-F7A4-463C-96B0-9D7BDBF218C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-49.13","matchCriteriaId":"FCEED8AC-F9A9-4F75-BB32-F53967A8E9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-91.13","matchCriteriaId":"BC825A83-8D84-42C7-868F-0470FF79D497"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-49.13","matchCriteriaId":"442F6925-199D-4E5B-84C1-05C4D8108B62"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.html","source":"secure@citrix.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-3519","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}