{"resultsPerPage":118,"startIndex":0,"totalResults":118,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-10T23:58:56.098","vulnerabilities":[{"cve":{"id":"CVE-2007-6037","sourceIdentifier":"cve@mitre.org","published":"2007-11-20T11:46:00.000","lastModified":"2026-06-16T22:47:18.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter and other unspecified parameters."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en ws/generic_api_call.pl en Citrix NetScaler 8.0 build 47.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un parámetro standalone y otros parámetros no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:8.0_build_47.8:*:*:*:*:*:*:*","matchCriteriaId":"27929ABB-C363-4F23-B400-0691CCAF716E"}]}]}],"references":[{"url":"http://osvdb.org/39009","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27726","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3377","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/483920/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26491","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1018981","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/4065","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38563","source":"cve@mitre.org"},{"url":"http://osvdb.org/39009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/483920/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1018981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6192","sourceIdentifier":"cve@mitre.org","published":"2007-11-30T01:46:00.000","lastModified":"2026-06-16T22:47:34.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack."},{"lang":"es","value":"La interfaz de administración web en Citrix NetScaler 8.0 build 47.8 usa cifrado débil (XOR de datos sin relleno) para almacenar las credenciales dentro de una cookie, lo cual facilita a los atacantes remotos la obtención de credenciales en texto claro cuando la cookie es capturada mediante un ataque de texto plano conocido (known-plaintext attack)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:8.0:build_47.8:*:*:*:*:*:*","matchCriteriaId":"28659230-F043-401F-9191-179E4966BB5E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3409","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1018991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/484182/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38646","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1018991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/484182/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6193","sourceIdentifier":"cve@mitre.org","published":"2007-11-30T01:46:00.000","lastModified":"2026-06-16T22:47:34.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers to obtain sensitive network configuration information if this address is not the same as the address being used by the web interface."},{"lang":"es","value":"La interfaz web de administración en Citrix NetScaler 8.0 build 47.8 almacena la dirección IP del dispositivo primario en una cookie, lo cual podría permitir a atacantes remotos obtener información de configuración sensible si la dirección no es la misma que la usada en la interfaz web."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:8.0:build_47.8:*:*:*:*:*:*","matchCriteriaId":"28659230-F043-401F-9191-179E4966BB5E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3409","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/484182/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/484182/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6267","sourceIdentifier":"cve@mitre.org","published":"2007-12-07T11:46:00.000","lastModified":"2026-06-16T22:47:43.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information."},{"lang":"es","value":"Vulnerabilidad en Citrix EdgeSight 4.2 y 4.5 para Presentation Server, EdgeSight 4.2 y 4.5 para Endpoints, y EdgeSight para NetScaler 1.0 y 1.1 . No guardan correctamente los credenciales de la base de datos en archivos de configuración, lo que permite que un usuario local pueda obtener información sensible."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:edgesight_for_endpoints:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A51F3443-CC16-40A2-8A43-5E2A6DA1C68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:edgesight_for_endpoints:4.5:*:*:*:*:*:*:*","matchCriteriaId":"3807F821-1E3B-4E52-8E14-A6F22DA28D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:edgesight_for_netscaler:1.0:*:*:*:*:*:*:*","matchCriteriaId":"03B79B3B-A526-496F-84F1-9855C1F1A67D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:edgesight_for_netscaler:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B62588DC-6A3B-4A5D-A822-15268C209696"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:edgesight_for_presentation_server:4.2:*:*:*:*:*:*:*","matchCriteriaId":"079DDF6A-305E-4775-B07D-24F222782160"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:edgesight_for_presentation_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"3FF901DE-4F7B-49A1-A4B9-31FEDF559BFA"}]}]}],"references":[{"url":"http://secunia.com/advisories/27935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX115281","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/26705","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019050","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/4091","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38861","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX115281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/26705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2213","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.657","lastModified":"2026-06-16T23:09:01.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions."},{"lang":"es","value":"La configuración por defecto en las características de seguridad globales en el appliance Citrix NetScaler Access Gateway con el firmware Enterprise Edition 9.0, 8.1 y versiones anteriores especifica la opción \"Allow for the Default Authorization Action\" lo que puede permitir a usuarios remotos autenticados evitar las restricciones de acceso previstas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:N/A:N","baseScore":6.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-21T16:31:24.661375Z","id":"CVE-2009-2213","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"FD2AF148-E1B5-427B-97E2-AEEC59D72162"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DAA4BFC4-A82E-4820-AB97-2EF9D9EA9276"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:8.0:*:*:*:*:*:*:*","matchCriteriaId":"B80F696E-74A8-432C-BA31-6CE158B4DB82"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.0:*:*:*:*:*:*:*","matchCriteriaId":"CAD93B7C-E6C1-42F0-8963-C33EF0F6B88D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX118770","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35422","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1641","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51274","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.citrix.com/article/CTX118770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2013-2767","sourceIdentifier":"cve@mitre.org","published":"2013-04-25T20:55:10.003","lastModified":"2026-06-16T23:53:56.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Citrix NetScaler Access Gateway Enterprise Edition (AGEE)  antes de v9.3.62.4 y v10.x hasta v10.0.74.4 y NetScaler AGEE Common Criteria antes de v9.3.53.6, permite a atacantes remotos evitar las restricciones de acceso a la intranet destinados a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","baseScore":5.4,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.61.5","matchCriteriaId":"7D951535-13E6-4CAF-8D8A-43A2E68D1C5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.1:*:*:*:*:*:*:*","matchCriteriaId":"4540051A-52DA-43D7-B0F4-C0EED00209FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.2:*:*:*:*:*:*:*","matchCriteriaId":"801E1382-88D5-4526-A301-31400A490FD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:*:*:*:*:*:*:*","matchCriteriaId":"45706C36-AB39-46A8-9E60-CB4D41ABD3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:agee_common_criteria_build:*:*:*:*:*:*","matchCriteriaId":"4F192110-9E33-42EF-9BBF-C94A034DE5D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"53D2B7EB-9044-41BD-BF6B-4D31D71F9384"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.0.74.4:*:*:*:*:*:*:*","matchCriteriaId":"161CFE7D-57CE-4D44-98CF-2E3631AEDD2B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]}],"references":[{"url":"http://support.citrix.com/article/ctx137238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/521612","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://support.citrix.com/article/ctx137238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/521612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2013-6011","sourceIdentifier":"cve@mitre.org","published":"2013-10-04T17:55:10.023","lastModified":"2026-06-16T23:59:53.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a crafted request."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller (ADC) 10.0 anterior a la versión 10.0-76.7 permite a atacantes remotos provocar una denegación de servicio (cuelgue de nsconfigd y reinicio del dispositivo) a través de una petición diseñada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0.e:*:*:*:*:*:*:*","matchCriteriaId":"1D60AC30-EDD7-441B-B0F5-6AD06708D82B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-10/0016.html","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/ctx139017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-10/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/ctx139017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6938","sourceIdentifier":"cve@mitre.org","published":"2014-03-11T13:00:26.937","lastModified":"2026-06-17T00:01:09.720","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to the \"Virtual Machine Daemon.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el Service VM en Citrix NetScaler SDX 9.3 anterior a 9.3-64.4 y 10.0 anterior a 10.0-77.5 y Application Delivery Controller (ADC) 9.3.x anterior a 9.3-64.4, 10.0 anterior a 10.0-77.5 y 10.1 anterior a 10.1-118.7 permite a atacantes causar una denegación de servicio a través de vectores desconocidos, relacionado con el \"Virtual Machine Daemon.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F8DC5553-97A9-4E63-931D-A4D52DDBAA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*","matchCriteriaId":"A4BD849B-285A-4305-A08C-B6D4707DEB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX139049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX140113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX139049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX140113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6939","sourceIdentifier":"cve@mitre.org","published":"2014-03-11T13:00:36.217","lastModified":"2026-06-17T00:01:09.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to \"RADIUS authentication.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Citrix NetScaler Application Delivery Controller (ADC) 9.3.x anterior a 9.3-64.4, 10.0 anterior a 10.0-77.5 y 10.1 anterior a 10.1-118.7 permite a atacantes causar una denegación de servicio a través de vectores desconocidos, relacionado con \"RADIUS authentication.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F8DC5553-97A9-4E63-931D-A4D52DDBAA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*","matchCriteriaId":"A4BD849B-285A-4305-A08C-B6D4707DEB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX139049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX139049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6940","sourceIdentifier":"cve@mitre.org","published":"2014-03-11T13:00:36.217","lastModified":"2026-06-17T00:01:09.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller (ADC) 9.3.x anterior a 9.3-64.4, 10.0 anterior a 10.0-77.5 y 10.1 anterior a 10.1-118.7 registra las credenciales de usuarios, lo que permite a atacantes obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F8DC5553-97A9-4E63-931D-A4D52DDBAA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*","matchCriteriaId":"A4BD849B-285A-4305-A08C-B6D4707DEB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX139049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX139049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6941","sourceIdentifier":"cve@mitre.org","published":"2014-03-11T13:00:36.233","lastModified":"2026-06-17T00:01:10.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to \"breakout\" of the shell via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Citrix NetScaler Application Delivery Controller (ADC) 9.3.x anterior a 9.3-64.4, 10.0 anterior a 10.0-77.5 y 10.1 anterior a 10.1-118.7 permite a usuarios \"liberarse\" del shell a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F8DC5553-97A9-4E63-931D-A4D52DDBAA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*","matchCriteriaId":"A4BD849B-285A-4305-A08C-B6D4707DEB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX139049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX139049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6942","sourceIdentifier":"cve@mitre.org","published":"2014-03-11T13:00:36.233","lastModified":"2026-06-17T00:01:10.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de CSRF en Citrix NetScaler Application Delivery Controller (ADC) 9.3.x anterior a 9.3-64.4, 10.0 anterior a 10.0-77.5 y 10.1 anterior a 10.1-118.7 permite a atacantes remotos secuestrar la autenticación de victimas no especificadas a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F8DC5553-97A9-4E63-931D-A4D52DDBAA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*","matchCriteriaId":"A4BD849B-285A-4305-A08C-B6D4707DEB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX139049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX139049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6943","sourceIdentifier":"cve@mitre.org","published":"2014-03-11T13:00:36.247","lastModified":"2026-06-17T00:01:10.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller (ADC) 9.3.x anterior a 9.3-64.4, 10.0 anterior a 10.0-77.5 y 10.1 anterior a 10.1-118.7 permite a atacantes remotos realizar un ataque de inyección LDAP a través de vectores relacionados con SSH y nombres de usuarios de gestión Web."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F8DC5553-97A9-4E63-931D-A4D52DDBAA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*","matchCriteriaId":"A4BD849B-285A-4305-A08C-B6D4707DEB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX139049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX139049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6944","sourceIdentifier":"cve@mitre.org","published":"2014-03-11T13:00:36.247","lastModified":"2026-06-17T00:01:10.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz del usuario en el AAA TM vServer en Citrix NetScaler Application Delivery Controller (ADC) 9.3.x anterior a 9.3-64.4, 10.0 anterior a 10.0-77.5 y 10.1 anterior a 10.1-118.7 permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F8DC5553-97A9-4E63-931D-A4D52DDBAA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*","matchCriteriaId":"A4BD849B-285A-4305-A08C-B6D4707DEB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX139049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX139049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-2881","sourceIdentifier":"cve@mitre.org","published":"2014-05-01T17:28:36.367","lastModified":"2026-06-17T00:07:18.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación de acuerdo clave Diffie-Hellman en el Applet Java de gestión de la interfaz gráfica de usuario en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway anterior a 9.3-66.5 y 10.x anterior a 10.1-122.17 tiene impacto y vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:*:*:*:*:*:*:*","matchCriteriaId":"45706C36-AB39-46A8-9E60-CB4D41ABD3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.1.e","matchCriteriaId":"3ECB1B6A-F4F7-4C22-9F51-457B0ED67D1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.e","matchCriteriaId":"F7638230-4C1F-4595-87F3-F705E432371B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX140651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1030180","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX140651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1030180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-2882","sourceIdentifier":"cve@mitre.org","published":"2014-05-01T17:28:36.383","lastModified":"2026-06-17T00:07:18.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation."},{"lang":"es","value":"Vulnerabilidad no especificada en la GUI de gestión en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway anterior a 9.3-66.5 y 10.x anterior a 10.1-122.17 tiene impacto y vectores no especificados, relacionado con validación de certificado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.1.e","matchCriteriaId":"3ECB1B6A-F4F7-4C22-9F51-457B0ED67D1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.e","matchCriteriaId":"F7638230-4C1F-4595-87F3-F705E432371B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:*:*:*:*:*:*:*","matchCriteriaId":"45706C36-AB39-46A8-9E60-CB4D41ABD3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX140651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1030180","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX140651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1030180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-1899","sourceIdentifier":"cve@mitre.org","published":"2014-05-02T14:55:05.933","lastModified":"2026-06-17T00:05:43.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access Gateway Enterprise Edition) 9.x before 9.3.66.5 and 10.x before 10.1.123.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Citrix NetScaler Gateway (anteriormente Citrix Access Gateway Enterprise Edition) 9.x anterior a 9.3.66.5 y 10.x anterior a 10.1.123.9 permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:*:*:*:*:*:*:*","matchCriteriaId":"45706C36-AB39-46A8-9E60-CB4D41ABD3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3.61.5:*:*:*:*:*:*:*","matchCriteriaId":"244DD443-0E84-4294-8A41-A44AB4FA1267"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3.62.4:*:*:*:*:*:*:*","matchCriteriaId":"6CD6FBD0-10C6-45DB-899C-D0E726C8F8DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"53D2B7EB-9044-41BD-BF6B-4D31D71F9384"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.0.74.4:*:*:*:*:*:*:*","matchCriteriaId":"161CFE7D-57CE-4D44-98CF-2E3631AEDD2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"0BA6FD03-E65E-49FE-ABA2-C4BCFEE7AA50"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/67177","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1030186","source":"cve@mitre.org"},{"url":"https://support.citrix.com/article/CTX140291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/67177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX140291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-4346","sourceIdentifier":"cve@mitre.org","published":"2014-07-16T14:19:03.997","lastModified":"2026-06-17T00:09:50.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz del usuario de administración en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway (anteriormente Access Gateway Enterprise Edition) 10.1 anterior a 10.1-126.12 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"0BA6FD03-E65E-49FE-ABA2-C4BCFEE7AA50"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2014/Jul/77","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59942","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX140863","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/532802/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/68535","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1030572","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1030573","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94493","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2014/Jul/77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX140863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/532802/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/68535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-4347","sourceIdentifier":"cve@mitre.org","published":"2014-07-16T14:19:04.043","lastModified":"2026-06-17T00:09:50.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway (anteriormente Access Gateway Enterprise Edition) anterior a 9.3-62.4 y 10.x anterior a 10.1-126.12 permite a atacantes obtener información sensible a través de vectores relacionados con una cookie."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:*:*:*:*:*:*:*","matchCriteriaId":"45706C36-AB39-46A8-9E60-CB4D41ABD3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"0BA6FD03-E65E-49FE-ABA2-C4BCFEE7AA50"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3:*:*:*:*:*:*:*","matchCriteriaId":"BA8972FF-1D8D-4641-B921-D4AB58994238"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2014/Jul/77","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59942","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX140863","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/532802/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/68537","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1030572","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1030573","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94494","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2014/Jul/77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX140863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/532802/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/68537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-7140","sourceIdentifier":"cve@mitre.org","published":"2014-10-21T14:55:04.133","lastModified":"2026-06-17T00:14:26.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la interfaz de gestión en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.x anterior a 10.1-129.11 y 10.5 anterior a 10.5-50.10 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A3262676-B66B-48B6-8515-A2F6D5B4BBE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX200206","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1031129","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX200206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1031129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-8580","sourceIdentifier":"cve@mitre.org","published":"2014-11-07T19:55:04.697","lastModified":"2026-06-17T00:16:57.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access \"network resources\" of other users via unknown vectors."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller y NetScaler Gateway 10.5.50.10 anterior a 10.5-52.11, 10.1.122.17 anterior a 10.1-129.11, y 10.1-120.1316.e anterior a 10.1-129.1105.e, cunado utilizan configuraciones no especificadas, permiten a usuarios remotos autenticados acceder a 'los recursos de la red' de otros usuarios a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.120.1316.e:*:*:*:*:*:*:*","matchCriteriaId":"C2CEF78D-8155-4C7C-A7BC-6AB2920FDE39"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.121:*:*:*:*:*:*:*","matchCriteriaId":"4200E498-5730-446C-B17D-C73CD9DD23BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.122:*:*:*:*:*:*:*","matchCriteriaId":"4920C74B-2C41-4074-B376-BC464B787973"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.123:*:*:*:*:*:*:*","matchCriteriaId":"E0790595-B322-4203-AE1A-0DF4AB2AAD8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.124:*:*:*:*:*:*:*","matchCriteriaId":"EF19EAF4-EB35-4668-9973-3F952B446395"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.125:*:*:*:*:*:*:*","matchCriteriaId":"6698AF1B-AF32-475A-9018-1F70A98F5577"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.126:*:*:*:*:*:*:*","matchCriteriaId":"0E596AB3-2C82-4B5A-8613-F273DE9ADE79"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.127:*:*:*:*:*:*:*","matchCriteriaId":"3121D097-0E4E-4664-BFFD-A19A1B32E060"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.128:*:*:*:*:*:*:*","matchCriteriaId":"2AEDF8DB-B375-4313-8239-9725BF754DFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.129:*:*:*:*:*:*:*","matchCriteriaId":"4E5E2D43-0DD4-436B-9D8D-857D906C7846"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5.50.10:*:*:*:*:*:*:*","matchCriteriaId":"610692FA-4E9C-4C2F-971B-212AEA88350C"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5.51.10:*:*:*:*:*:*:*","matchCriteriaId":"2149C7C8-B9CB-46F6-A09A-D7318D5A7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.120.1316.e:*:*:*:*:*:*:*","matchCriteriaId":"065F4DB8-29E4-485C-BA7E-53CBDEEEB2D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.121:*:*:*:*:*:*:*","matchCriteriaId":"C0A4789A-A774-46AE-A11D-D5209F0475E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.122:*:*:*:*:*:*:*","matchCriteriaId":"F26ED266-19D1-47FE-89A0-FA738B220517"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.123:*:*:*:*:*:*:*","matchCriteriaId":"4015CD17-11F7-4982-952C-EA2C9D1F31A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.124:*:*:*:*:*:*:*","matchCriteriaId":"2161AD30-18C5-4DB2-BC80-66F7CED4F839"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.125:*:*:*:*:*:*:*","matchCriteriaId":"CC1319D8-D77C-47B1-A201-2279730EF0C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.126:*:*:*:*:*:*:*","matchCriteriaId":"C6506EBE-CDE6-40C2-B9AB-DB396B3C440B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.127:*:*:*:*:*:*:*","matchCriteriaId":"48944761-F3B4-448C-B665-F30C66F8B2C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.128:*:*:*:*:*:*:*","matchCriteriaId":"EB292BA1-7FF4-4C24-97F5-97C99DD8583F"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.129:*:*:*:*:*:*:*","matchCriteriaId":"9F502B60-1ED5-45E8-A3AF-9947912FCC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5.50.10:*:*:*:*:*:*:*","matchCriteriaId":"434B995D-BB1E-48FD-AB92-33E95EC75C1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5.51.10:*:*:*:*:*:*:*","matchCriteriaId":"48B0E1CE-44E0-4A3E-85D1-F1391FDB3B5E"}]}]}],"references":[{"url":"http://secunia.com/advisories/62114","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX200254","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1031212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/98661","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/62114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX200254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1031212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/98661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-2838","sourceIdentifier":"cve@mitre.org","published":"2015-04-03T14:59:01.240","lastModified":"2026-06-17T00:24:50.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands as nsroot via shell metacharacters in the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix."},{"lang":"es","value":"Vulnerabilidad de CSRF en la API Nitro en Citrix NetScaler anterior a 10.5 build 52.3nc permite a atacantes remotos secuestrar la autenticación de administradores para solicitudes que ejecutan comandos arbitrarios como nsroot a través de metacaracteres de shell en el miembro de JSON file_name en params/xen_hotfix/0 to nitro/v1/config/xen_hotfix."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/130937/Citrix-NITRO-SDK-Command-Injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Mar/129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/534936/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/73358","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/36442/","source":"cve@mitre.org"},{"url":"https://www.securify.nl/advisory/SFY20140806/command_injection_vulnerability_in_citrix_nitro_sdk_xen_hotfix_page.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/130937/Citrix-NITRO-SDK-Command-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Mar/129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/534936/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/36442/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.securify.nl/advisory/SFY20140806/command_injection_vulnerability_in_citrix_nitro_sdk_xen_hotfix_page.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-2839","sourceIdentifier":"cve@mitre.org","published":"2015-04-03T14:59:02.303","lastModified":"2026-06-17T00:24:50.757","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix."},{"lang":"es","value":"La API Nitro en Citrix NetScaler anterior a 10.5 build 52.3nc utiliza un tipo de contenido incorrecto cuando devuelve un mensaje de error, lo que permite a atacantes remotos realizar ataques de XSS a través del miembro de JSON file_name en params/xen_hotfix/0 en nitro/v1/config/xen_hotfix."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/130931/Citrix-NITRO-SDK-xen_hotfix-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Mar/128","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/534935/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/73311","source":"cve@mitre.org"},{"url":"https://www.securify.nl/advisory/SFY20140805/citrix_nitro_sdk_xen_hotfix_page_is_vulnerable_to_cross_site_scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/130931/Citrix-NITRO-SDK-xen_hotfix-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Mar/128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/534935/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.securify.nl/advisory/SFY20140805/citrix_nitro_sdk_xen_hotfix_page_is_vulnerable_to_cross_site_scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-2840","sourceIdentifier":"cve@mitre.org","published":"2015-04-03T14:59:03.303","lastModified":"2026-06-17T00:24:50.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to inject arbitrary web script or HTML via the searchQuery parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en help/rt/large_search.html en Citrix NetScaler anterior a 10.5 build 52.3nc permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través del parámetro searchQuery."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/130936/Citrix-NetScaler-VPX-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Mar/130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/534934/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/73342","source":"cve@mitre.org"},{"url":"https://www.securify.nl/advisory/SFY20140807/citrix_netscaler_vpx_help_pages_are_vulnerable_to_cross_site_scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/130936/Citrix-NetScaler-VPX-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Mar/130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/534934/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.securify.nl/advisory/SFY20140807/citrix_netscaler_vpx_help_pages_are_vulnerable_to_cross_site_scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-2841","sourceIdentifier":"cve@mitre.org","published":"2015-04-03T14:59:04.287","lastModified":"2026-06-17T00:24:50.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the application/octet-stream and text/xml Content-Types."},{"lang":"es","value":"Citrix NetScaler AppFirewall, utilizado en NetScaler 10.5, permite a atacantes remotos evadir las restricciones del firewall a través de una cabecera Content-Type manipulada, tal y como fue demostrado por los tipos de contenido application/octet-stream y text/xml."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2015/Mar/95","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id/1031928","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/36369/","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2015/Mar/95","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id/1031928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/36369/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-2829","sourceIdentifier":"cve@mitre.org","published":"2015-05-12T19:59:16.887","lastModified":"2026-06-17T00:24:50.233","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service (reboot) via unspecified vectors."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway anterior a 10.5 Build 53.9 hasta 55.8 y 10.5.e Build 53-9010.e permiten a atacantes remotos causar una denegación de servicio (reinicio) a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"4C6A8316-7943-4951-8FB7-A14D0FAB8F3E"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX200861","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/74473","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1032242","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX200861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/74473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5080","sourceIdentifier":"cve@mitre.org","published":"2015-07-16T14:59:05.933","lastModified":"2026-06-17T00:28:24.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs."},{"lang":"es","value":"La interfaz de gestión en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.1 anterior a 10.1.132.8, 10.5 anterior a Build 56.15 y 10.5.e anterior a Build 56.1505.e, permite a usuarios remotos autenticados ejecutar comandos de shell arbitrarios a través de metacaracteres de shell en el parámetro de filtro to rapi/ipsec_logs."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.120.1316.e:*:*:*:*:*:*:*","matchCriteriaId":"C2CEF78D-8155-4C7C-A7BC-6AB2920FDE39"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.121:*:*:*:*:*:*:*","matchCriteriaId":"4200E498-5730-446C-B17D-C73CD9DD23BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.122:*:*:*:*:*:*:*","matchCriteriaId":"4920C74B-2C41-4074-B376-BC464B787973"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.123:*:*:*:*:*:*:*","matchCriteriaId":"E0790595-B322-4203-AE1A-0DF4AB2AAD8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.124:*:*:*:*:*:*:*","matchCriteriaId":"EF19EAF4-EB35-4668-9973-3F952B446395"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.125:*:*:*:*:*:*:*","matchCriteriaId":"6698AF1B-AF32-475A-9018-1F70A98F5577"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.126:*:*:*:*:*:*:*","matchCriteriaId":"0E596AB3-2C82-4B5A-8613-F273DE9ADE79"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.127:*:*:*:*:*:*:*","matchCriteriaId":"3121D097-0E4E-4664-BFFD-A19A1B32E060"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.128:*:*:*:*:*:*:*","matchCriteriaId":"2AEDF8DB-B375-4313-8239-9725BF754DFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.129:*:*:*:*:*:*:*","matchCriteriaId":"4E5E2D43-0DD4-436B-9D8D-857D906C7846"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"0EE0A709-2C34-495C-85F1-9DEE8DD58BE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.120.1316.e:*:*:*:*:*:*:*","matchCriteriaId":"065F4DB8-29E4-485C-BA7E-53CBDEEEB2D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.121:*:*:*:*:*:*:*","matchCriteriaId":"C0A4789A-A774-46AE-A11D-D5209F0475E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.122:*:*:*:*:*:*:*","matchCriteriaId":"F26ED266-19D1-47FE-89A0-FA738B220517"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.123:*:*:*:*:*:*:*","matchCriteriaId":"4015CD17-11F7-4982-952C-EA2C9D1F31A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.124:*:*:*:*:*:*:*","matchCriteriaId":"2161AD30-18C5-4DB2-BC80-66F7CED4F839"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.125:*:*:*:*:*:*:*","matchCriteriaId":"CC1319D8-D77C-47B1-A201-2279730EF0C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.126:*:*:*:*:*:*:*","matchCriteriaId":"C6506EBE-CDE6-40C2-B9AB-DB396B3C440B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.127:*:*:*:*:*:*:*","matchCriteriaId":"48944761-F3B4-448C-B665-F30C66F8B2C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.128:*:*:*:*:*:*:*","matchCriteriaId":"EB292BA1-7FF4-4C24-97F5-97C99DD8583F"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.129:*:*:*:*:*:*:*","matchCriteriaId":"9F502B60-1ED5-45E8-A3AF-9947912FCC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5.50.10:*:*:*:*:*:*:*","matchCriteriaId":"434B995D-BB1E-48FD-AB92-33E95EC75C1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5.51.10:*:*:*:*:*:*:*","matchCriteriaId":"48B0E1CE-44E0-4A3E-85D1-F1391FDB3B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"4C6A8316-7943-4951-8FB7-A14D0FAB8F3E"}]}]}],"references":[{"url":"http://security-assessment.com/files/documents/advisory/Citrix-Netscaler-Final.pdf","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX201149","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/75505","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1032762","source":"cve@mitre.org"},{"url":"http://security-assessment.com/files/documents/advisory/Citrix-Netscaler-Final.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX201149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5538","sourceIdentifier":"cve@mitre.org","published":"2015-09-17T16:59:02.730","lastModified":"2026-06-17T00:29:17.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the (1) Command Line Interface (CLI) and the (2) Web User Interface (UI)."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway en versiones anteriores a 10.1 Build 132.8, 10.5 en versiones anteriores a Build 57.7 y 10.5e en versiones anteriores a Build 56.1505.e, permite a atacantes remotos obtener privilegios a través de vectores no especificados, relacionado con la (1) Command Line Interface (CLI) y (2) Web User Interface (UI)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"0EE0A709-2C34-495C-85F1-9DEE8DD58BE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A254925E-AD47-4722-AAB2-43A6FEA900AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"4C6A8316-7943-4951-8FB7-A14D0FAB8F3E"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX201334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1033618","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX201334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1033618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6672","sourceIdentifier":"cve@mitre.org","published":"2015-09-17T16:59:04.010","lastModified":"2026-06-17T00:31:13.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la Administrative Web Interface en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway en versiones anteriores a 10.1 Build 132.8, 10.5 en versiones anteriores a Build 57.7 y 10.5e en versiones anteriores a Build 56.1505.e, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"0EE0A709-2C34-495C-85F1-9DEE8DD58BE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A254925E-AD47-4722-AAB2-43A6FEA900AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"4C6A8316-7943-4951-8FB7-A14D0FAB8F3E"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX201334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1033618","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX201334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1033618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7996","sourceIdentifier":"cve@mitre.org","published":"2015-11-17T15:59:17.770","lastModified":"2026-06-17T00:33:32.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache."},{"lang":"es","value":"La API Nitro en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway en versiones anteriores a 10.1 Build 133.9, 10.5 en versiones anteriores a Build 58.11 y 10.5.e en versiones anteriores a Build 56.1505.e en dispositivos NetScaler Service Delivery Appliance Service VM (SVM) permite a atacantes obtener credenciales a través de la caché del navegador."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_service_delivery_appliance_service_vm:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"40AFE347-13AE-4064-9E71-A9B1959CFABE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A254925E-AD47-4722-AAB2-43A6FEA900AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX202482","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034167","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX202482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7997","sourceIdentifier":"cve@mitre.org","published":"2015-11-17T15:59:19.317","lastModified":"2026-06-17T00:33:32.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en la API Nitro en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway en versiones anteriores a 10.1 Build 133.9, 10.5 en versiones anteriores a Build 58.11 y 10.5.e en versiones anteriores a Build 56.1505.e en dispositivos NetScaler Service Delivery Appliance Service VM (SVM) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_service_delivery_appliance_service_vm:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"40AFE347-13AE-4064-9E71-A9B1959CFABE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A254925E-AD47-4722-AAB2-43A6FEA900AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX202482","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034167","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX202482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7998","sourceIdentifier":"cve@mitre.org","published":"2015-11-17T15:59:20.693","lastModified":"2026-06-17T00:33:32.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allows attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"La IU de administración en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway en versiones anteriores a 10.1 Build 133.9, 10.5 en versiones anteriores a Build 58.11 y 10.5.e en versiones anteriores a Build 56.1505.e en dispositivos NetScaler Service Delivery Appliance Service VM (SVM), permite a atacantes obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_service_delivery_appliance_service_vm:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"40AFE347-13AE-4064-9E71-A9B1959CFABE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A254925E-AD47-4722-AAB2-43A6FEA900AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD151FA3-8B96-48AF-B908-C29EAE88EF5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX202482","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034167","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX202482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2071","sourceIdentifier":"cve@mitre.org","published":"2016-02-17T15:59:04.767","lastModified":"2026-06-17T00:43:22.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 11.x en versiones anteriores a 11.0 Build 64.34, 10.5 en versiones anteriores a 10.5 Build 59.13 y 10.5.e en versiones anteriores a Build 59.1305.e permite a atacantes remotos obtener privilegios a través de comandos NS Web GUI no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"93F54B1F-BD90-4152-94AA-C3EBC013F30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:11.0:*:*:*:*:*:*:*","matchCriteriaId":"005FE189-80FF-406C-88E5-B9D9B0723779"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"93F54B1F-BD90-4152-94AA-C3EBC013F30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:11.0:*:*:*:*:*:*:*","matchCriteriaId":"005FE189-80FF-406C-88E5-B9D9B0723779"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX206001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035098","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX206001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2072","sourceIdentifier":"cve@mitre.org","published":"2016-02-17T15:59:05.750","lastModified":"2026-06-17T00:43:23.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors."},{"lang":"es","value":"La Administrative Web Interface en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 11.x en versiones anteriores a 11.0 Build 64.34, 10.5 en versiones anteriores a 10.5 Build 59.13, 10.5.e en versiones anteriores a Build 59.1305.e y 10.1 permite a atacantes remotos llevar a cabo ataques de secuestro de clic a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.1:*:*:*:*:*:*:*","matchCriteriaId":"ADF49FFA-B7D2-4BA0-A633-5CD58083F351"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"93F54B1F-BD90-4152-94AA-C3EBC013F30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:11.0:*:*:*:*:*:*:*","matchCriteriaId":"005FE189-80FF-406C-88E5-B9D9B0723779"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.1:*:*:*:*:*:*:*","matchCriteriaId":"ADF49FFA-B7D2-4BA0-A633-5CD58083F351"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"93F54B1F-BD90-4152-94AA-C3EBC013F30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:11.0:*:*:*:*:*:*:*","matchCriteriaId":"005FE189-80FF-406C-88E5-B9D9B0723779"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX206001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035098","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX206001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4945","sourceIdentifier":"cve@mitre.org","published":"2016-06-01T22:59:06.940","lastModified":"2026-06-17T00:48:28.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in vpn/js/gateway_login_form_view.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSC_TMAC cookie."},{"lang":"es","value":"Vulnerabilidad de XSS en vpn/js/gateway_login_form_view.js en Citrix NetScaler Gateway 11.0 en versiones anteriores a Build 66.11 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la cookie NSC_TMAC."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway_11.0:-:*:*:*:*:*:*:*","matchCriteriaId":"54B6EC53-55DE-44A0-8F85-1E94276FA61C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_11.0_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"65.35","matchCriteriaId":"4AFAED56-21AD-47F3-9E31-CCE06BB55E48"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137221/Citrix-Netscaler-11.0-Build-64.35-Cross-Site-Scripting.html","source":"cve@mitre.org"},{"url":"http://persicon.com/tl_files/advisories/PERSICON-advisory-2016-No-1-citrix.txt","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX213313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538515/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036020","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137221/Citrix-Netscaler-11.0-Build-64.35-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://persicon.com/tl_files/advisories/PERSICON-advisory-2016-No-1-citrix.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX213313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538515/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-9028","sourceIdentifier":"cve@mitre.org","published":"2016-10-28T15:59:20.313","lastModified":"2026-06-17T00:55:19.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header."},{"lang":"es","value":"Vulnerabilidad de redirección no autorizada en Citrix NetScaler ADC en versiones anteriores a 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F y 11.1 47.14 permite a un atacante remoto robar las cookies de sesión de un usuario legítimo AAA a través de manipulación del cabecero del Host."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.1","matchCriteriaId":"D967EA02-A9F4-45EA-AD1D-56D8B1BC8335"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"CB678AF5-12B4-41D0-A381-46EE277313B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"123D42E1-3CDD-4D46-82F6-8982DE716F7E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93947","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037175","source":"cve@mitre.org"},{"url":"https://support.citrix.com/article/CTX218361","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX218361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-5933","sourceIdentifier":"cve@mitre.org","published":"2017-02-08T16:59:00.290","lastModified":"2026-06-17T01:21:27.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in a session and a \"forbidden attack,\" a similar issue to CVE-2016-0270."},{"lang":"es","value":"Citrix NetScaler ADC y NetScaler Gateway 10.5 en versiones anteriores a Build 65.11, 11.0 en versiones anteriores a Build 69.12/69.123 y 11.1 en versiones anteriores a Build 51.21 genera aleatoriamente GCM nonces, lo que hace marginalmente más fácil a atacantes remotos obtener la clave de autenticación de GCM y falsificar datos aprovechando aprovechando una nonce reutilizada en una sesión y un \"ataque prohibido\", un problema similar a CVE-2016-0270."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.65.11","matchCriteriaId":"2E70E5D1-F79F-483B-AA26-C2EA34A8CBBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"11.0.69.12","matchCriteriaId":"29DE7CF6-66F9-4B13-92D4-44107ADDFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"11.1.51.21","matchCriteriaId":"9F1296F8-B7E8-443E-8C47-89B6EBD5C2FF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/96151","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/nonce-disrespect/nonce-disrespect","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://support.citrix.com/article/CTX220329","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/96151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/nonce-disrespect/nonce-disrespect","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.citrix.com/article/CTX220329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-6467","sourceIdentifier":"cve@mitre.org","published":"2017-03-04T03:59:00.163","lastModified":"2026-06-17T01:22:24.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size."},{"lang":"es","value":"En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bucle infinito del archivo analizador Netscaler, desencadenado por un archivo de captura malformado. Esto fue abordado en wiretap/netscaler.c cambiando las restricciones en el tamaño de archivo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.10","matchCriteriaId":"6D169318-8BFB-4888-A742-750659350DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndIncluding":"2.2.4","matchCriteriaId":"BD2DA6B4-7778-453F-8E71-0C90B060CFBD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2017/dsa-3811","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96561","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12083","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=284ad58d288722a8725401967bff0c4455488f0c","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2017-11.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=284ad58d288722a8725401967bff0c4455488f0c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2017-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-6468","sourceIdentifier":"cve@mitre.org","published":"2017-03-04T03:59:00.210","lastModified":"2026-06-17T01:22:24.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records."},{"lang":"es","value":"En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay una bloqueo del archivo analizador NetScaler, desencadenada por un archivo de captura malformado. Esto fue abordado en wiretap/netscaler.c validando la relación entre páginas y registros."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.10","matchCriteriaId":"6D169318-8BFB-4888-A742-750659350DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndIncluding":"2.2.4","matchCriteriaId":"BD2DA6B4-7778-453F-8E71-0C90B060CFBD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2017/dsa-3811","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96569","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13430","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9f3bc84b7e7e435c50b8b68f0fc526d0f5676cbf","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2017-08.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9f3bc84b7e7e435c50b8b68f0fc526d0f5676cbf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2017-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-6474","sourceIdentifier":"cve@mitre.org","published":"2017-03-04T03:59:00.427","lastModified":"2026-06-17T01:22:24.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes."},{"lang":"es","value":"En Wireshark 2.2.0 hasta 2.2.4 y 2.0.0 hasta 2.0.10, hay un bucle infinito del analizador de archivos NetScaler, desencadenado por un archivo de captura malformado. Esto fue abordado en wiretap/netscaler.c validando tamaños de registro."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.10","matchCriteriaId":"6D169318-8BFB-4888-A742-750659350DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndIncluding":"2.2.4","matchCriteriaId":"BD2DA6B4-7778-453F-8E71-0C90B060CFBD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2017/dsa-3811","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96566","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13429","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a998c9195f183d85f5b0bbeebba21a2d4d303d47","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2017-07.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a998c9195f183d85f5b0bbeebba21a2d4d303d47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2017-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7700","sourceIdentifier":"cve@mitre.org","published":"2017-04-12T23:59:00.153","lastModified":"2026-06-17T01:25:00.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size."},{"lang":"es","value":"En Wireshark 2.2.0 a 2.2.5 y 2.0.0 a 2.0.11, el analizador de archivos NetScaler podría entrar en un bucle infinito, desencadenado por un archivo de captura malformado. Esto se trató en wiretap/netscaler.c asegurando un tamaño de registro distinto a cero."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.11","matchCriteriaId":"34C9C7DF-BF75-489C-9F2E-4A2624CF8686"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndIncluding":"2.2.5","matchCriteriaId":"A17281EB-80A9-47D0-8F64-5B6151B4C475"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/97631","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038262","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-12","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2017-14.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/97631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2017-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7219","sourceIdentifier":"cve@mitre.org","published":"2017-04-13T14:59:01.900","lastModified":"2026-06-17T01:23:52.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows a remote authenticated attacker to run arbitrary commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de montón en las versiones Citrix NetScaler Gateway 10.1 en versiones anteriores a 135.8/135.12, 10.5 en versiones anteriores a 65.11, 11.0 en versiones anteriores a 70.12 y 11.1 en versiones anteriores a 52.13 permite a un atacante remoto autenticado ejecutar comandos arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A254925E-AD47-4722-AAB2-43A6FEA900AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/97626","source":"cve@mitre.org","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1038283","source":"cve@mitre.org"},{"url":"https://support.citrix.com/article/CTX222657","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/97626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1038283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX222657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-6316","sourceIdentifier":"cve@mitre.org","published":"2017-07-20T04:29:00.423","lastModified":"2026-06-17T01:22:08.357","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID."},{"lang":"es","value":"Los dispositivos Citrix NetScaler SD-WAN hasta la versión v9.1.2.26.561201 permite a atacantes remotos ejecutar comandos de shell aleatorios como root mediante la cookie CGISESSID. En los dispositivos cloudBridge (el nombre formal de NetScaler SD-WAN), la cookie llamada fue CAKEPHP mas que CGISESSID."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-04T20:46:26.484386Z","id":"CVE-2017-6316","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-25","cisaActionDue":"2022-04-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Citrix Multiple Products Remote Code Execution Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.2.26.561201","matchCriteriaId":"F3EEC9A0-E3AC-43C2-AC41-08C0847A025E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/99943","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039019","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX225990","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://www.exploit-db.com/exploits/42345/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/42346/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/99943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX225990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://www.exploit-db.com/exploits/42345/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/42346/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6316","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2015-3642","sourceIdentifier":"cve@mitre.org","published":"2017-08-02T19:29:00.477","lastModified":"2026-06-17T00:26:01.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Build 55.8007.e makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE)."},{"lang":"es","value":"Las funcionalidades de procesamiento TLS y DTLS en dispositivos Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway con versiones de firmware 9.x anteriores a 9.3 Build 68.5, 10.0 en su versión Build 78.6, 10.1 anterior a Build 130.13, 10.1.e anterior a Build 130.1302.e, 10.5 anterior a Build 55.8, y 10.5.e anterior a Build 55.8007.e hacen que sea más fácil que atacantes que realizan Man-in-the-middle obtengan datos en texto plano mediante un ataque padding-oracle, variante de CVE-2014-3566, también conocido como POODLE."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:9.0:*:*:*:*:*:*:*","matchCriteriaId":"77E759CD-4DF3-4B30-ADFD-9E63F753DFC1"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:9.1:*:*:*:*:*:*:*","matchCriteriaId":"9CC7D1B6-5C2D-4407-A55C-78FE6B899B46"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:9.2:*:*:*:*:*:*:*","matchCriteriaId":"2391E6E2-5E57-4E35-8F2C-89813F999F1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"61D94767-47A9-4516-BB4F-7800301214EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"99708F67-F4F1-4651-88FB-97869B9704C0"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.1e:*:*:*:*:*:*:*","matchCriteriaId":"6ABD1DF6-BE2F-4A23-ACD4-C33CFF68CB36"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"F0F108EA-A307-46FE-A093-5EF78182BC2A"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"208B0DD8-6635-4201-B565-FDA647F9F2E3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:9.0:*:*:*:*:*:*:*","matchCriteriaId":"77E759CD-4DF3-4B30-ADFD-9E63F753DFC1"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:9.1:*:*:*:*:*:*:*","matchCriteriaId":"9CC7D1B6-5C2D-4407-A55C-78FE6B899B46"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:9.2:*:*:*:*:*:*:*","matchCriteriaId":"2391E6E2-5E57-4E35-8F2C-89813F999F1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.0:*:*:*:*:*:*:*","matchCriteriaId":"61D94767-47A9-4516-BB4F-7800301214EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"99708F67-F4F1-4651-88FB-97869B9704C0"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.1e:*:*:*:*:*:*:*","matchCriteriaId":"6ABD1DF6-BE2F-4A23-ACD4-C33CFF68CB36"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"F0F108EA-A307-46FE-A093-5EF78182BC2A"},{"vulnerable":false,"criteria":"cpe:2.3:o:citrix:netscaler_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"208B0DD8-6635-4201-B565-FDA647F9F2E3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX200378","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX200378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-14602","sourceIdentifier":"cve@mitre.org","published":"2017-09-26T14:29:00.487","lastModified":"2026-06-17T01:06:27.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance."},{"lang":"es","value":"Se ha identificado una vulnerabilidad en la interfaz de gestión de Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.1 anterior a la build 135.18, 10.5 anterior a la build 66.9, 10.5e anterior a la build 60.7010.e, 11.0 anterior a la build 70.16, 11.1 anterior a la build 55.13 y 12.0 anterior a la build 53.13 (excepto la build 41.24) que, si se explota, podría permitir que un atacante con acceso a la interfaz de gestión de NetScaler obtenga acceso administrativo a la aplicación."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"CD06CC6E-DA2E-4F3F-9A35-9108826DE451"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"8A953CA4-98B4-4881-8674-A5B9B6A427F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"3CE459BE-DA8F-4DFB-B901-5F294C6311F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"49454F7D-77B5-46DF-B95C-312AF2E68EAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A254925E-AD47-4722-AAB2-43A6FEA900AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"4C6A8316-7943-4951-8FB7-A14D0FAB8F3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/100980","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX227928","source":"cve@mitre.org","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX228091","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/100980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX227928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX228091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-17382","sourceIdentifier":"cve@mitre.org","published":"2017-12-13T16:29:00.253","lastModified":"2026-06-17T01:10:44.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.5 anteriores a la build 67.13, 11.0 anteriores a la build 71.22, 11.1 anteriores a la build 56.19 y 12.0 anteriores a la build 53.22 podría permitir que atacantes remotos descifren datos de texto cifrado TLS aprovechando un oráculo de relleno RSA Bleichenbacher. Esto también se conoce como ataque ROBOT."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"3CE459BE-DA8F-4DFB-B901-5F294C6311F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"49454F7D-77B5-46DF-B95C-312AF2E68EAD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/102173","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039985","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://robotattack.org/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://support.citrix.com/article/ctx230238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/144389","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/102173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://robotattack.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.citrix.com/article/ctx230238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/144389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2017-17549","sourceIdentifier":"cve@mitre.org","published":"2017-12-13T16:29:00.393","lastModified":"2026-06-17T01:11:14.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensitive information from the backend client TLS handshake by leveraging use of TLS with Client Certificates and a Diffie-Hellman Ephemeral (DHE) key exchange."},{"lang":"es","value":"Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.5 anteriores a la build 67.13, 11.0 anteriores a la build 71.22, 11.1 anteriores a la build 56.19 y 12.0 anteriores a la build 53.22 permiten que atacantes remotos obtengan información sensible de la negociación TLS del cliente del backend aprovechando el uso de TLS con certificados del cliente y un intercambio de claves Diffie-Hellman Ephemeral (DHE)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"3CE459BE-DA8F-4DFB-B901-5F294C6311F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"49454F7D-77B5-46DF-B95C-312AF2E68EAD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/102177","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040011","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/ctx230612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/102177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/ctx230612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-6186","sourceIdentifier":"cve@mitre.org","published":"2018-02-01T14:29:00.560","lastModified":"2026-06-17T02:01:28.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges."},{"lang":"es","value":"Citrix NetScaler VPX hasta NS12.0 53.13.nc permite un ataque SSRF mediante la URI /rapi/read_url URI por un atacante autenticado que tenga una cuenta webapp. El atacante puede obtener acceso a la cuenta nsroot y ejecutar comandos remotos con privilegios root."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:12.0:*:*:*:*:*:*:*","matchCriteriaId":"7FD82D55-EFB3-4407-9102-08DEFB7323A8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/102915","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040440","source":"cve@mitre.org"},{"url":"https://gist.github.com/buxu/04ce809eb8b32ef57e232eab5e61f023","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://support.citrix.com/article/CTX232161","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/102915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gist.github.com/buxu/04ce809eb8b32ef57e232eab5e61f023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.citrix.com/article/CTX232161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2018-5314","sourceIdentifier":"cve@mitre.org","published":"2018-03-01T17:29:00.477","lastModified":"2026-06-17T02:00:01.663","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt."},{"lang":"es","value":"Vulnerabilidad de inyección de comandos en Citrix NetScaler ADC y NetScaler Gateway en versiones 11.0 anteriores a la build 70.16, versiones 11.1 anteriores a la build 55.13 y las versiones 12.0 anteriores a la build 53.13; y la instancia NetScaler Load Balancing distribuida en NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 y 5100 WAN Optimization Edition 9.3.0 permite que atacantes remotos ejecuten un comando del sistema o lean archivos arbitrarios mediante un mensaje de inicio de sesión SSH."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:11.0:*:*:*:*:*:*:*","matchCriteriaId":"3F5E9373-2929-445C-9111-763997337B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:11.1:*:*:*:*:*:*:*","matchCriteriaId":"B4BF6327-71CB-4536-9C75-0A4FBDA0CE6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C2375-6C9C-4EAE-BA20-A09D9DC85CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:11.0:*:*:*:*:*:*:*","matchCriteriaId":"AD9ED928-BD5A-466D-A7F0-531E2DC1ED11"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:11.1:*:*:*:*:*:*:*","matchCriteriaId":"7C28575C-9D3E-4818-9CE8-97EBC993E4E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:12.0:*:*:*:*:*:*:*","matchCriteriaId":"9C4E17DA-D4EA-49A9-9AB1-FDCA5A830B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:9.3.0:*:*:*:wan_optimization:*:*:*","matchCriteriaId":"2C3A8744-6053-4678-B132-2BD6B0178C7F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/103186","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040439","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232199","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-6808","sourceIdentifier":"cve@mitre.org","published":"2018-03-06T20:29:01.063","lastModified":"2026-06-17T02:02:18.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system."},{"lang":"es","value":"NetScaler ADC 10.5, 11.0, 11.1 y 12.0 y NetScaler Gateway 10.5, 11.0, 11.1 y12.0 permiten que atacantes remotos descarguen archivos arbitrarios en el sistema objetivo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"CB678AF5-12B4-41D0-A381-46EE277313B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"123D42E1-3CDD-4D46-82F6-8982DE716F7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"FFCE3458-6750-4773-BA18-CAA67A6093D4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1040440","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-6809","sourceIdentifier":"cve@mitre.org","published":"2018-03-06T20:29:01.127","lastModified":"2026-06-17T02:02:18.713","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system."},{"lang":"es","value":"NetScaler ADC 10.5, 11.0, 11.1 y 12.0 y NetScaler Gateway 10.5, 11.0, 11.1 y12.0 permiten que atacantes remotos obtengan privilegios en el sistema objetivo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"CB678AF5-12B4-41D0-A381-46EE277313B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"123D42E1-3CDD-4D46-82F6-8982DE716F7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"FFCE3458-6750-4773-BA18-CAA67A6093D4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1040440","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-6810","sourceIdentifier":"cve@mitre.org","published":"2018-03-06T20:29:01.203","lastModified":"2026-06-17T02:02:18.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en NetScaler ADC 10.5, 11.0, 11.1 y 12.0 y NetScaler Gateway 10.5, 11.0, 11.1 y12.0 permite que atacantes remotos salten el directorio en el sistema objetivo mediante una petición manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"CB678AF5-12B4-41D0-A381-46EE277313B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"123D42E1-3CDD-4D46-82F6-8982DE716F7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"FFCE3458-6750-4773-BA18-CAA67A6093D4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1040440","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-6811","sourceIdentifier":"cve@mitre.org","published":"2018-03-06T20:29:01.250","lastModified":"2026-06-17T02:02:18.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface."},{"lang":"es","value":"Múltiples vulnerabilidades de Cross-Site Scripting (XSS) en Citrix NetScaler ADC 10.5, 11.0, 11.1 y 12.0 y NetScaler Gateway 10.5, 11.0, 11.1 y 12.0 permiten que atacantes remotos inyecten scripts web o HTML arbitrarios mediante la interfaz de Citrix NetScaler."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"CB678AF5-12B4-41D0-A381-46EE277313B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"123D42E1-3CDD-4D46-82F6-8982DE716F7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"FFCE3458-6750-4773-BA18-CAA67A6093D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1040440","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232161","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX232161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-7218","sourceIdentifier":"cve@mitre.org","published":"2018-05-17T19:29:00.790","lastModified":"2026-06-17T02:02:48.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"La funcionalidad AppFirewall en Citrix NetScaler Application Delivery Controller y NetScaler Gateway en versiones 10.5 anteriores a la Build 68.7, versiones 11.0 anteriores a la Build 71.24, versiones 11.1 anteriores a la Build 58.13 y versiones 12.0 anteriores a la Build 57.24 permite que atacantes remotos ejecuten código arbitrario mediante vectores sin especificar."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"3CE459BE-DA8F-4DFB-B901-5F294C6311F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"49454F7D-77B5-46DF-B95C-312AF2E68EAD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1040921","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX234869","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX234869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-17444","sourceIdentifier":"cve@mitre.org","published":"2018-10-23T21:30:53.113","lastModified":"2026-06-17T01:45:50.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4."},{"lang":"es","value":"Se ha descubierto un problema de salto de directorio en Citrix SD-WAN 10.1.0 y NetScaler SD-WAN en versiones 9.3.x anteriores a la 9.3.6 y versiones 10.0.x anteriores a la 10.0.4."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"9.3.0","versionEndIncluding":"9.3.6","matchCriteriaId":"A5A7BC2F-EE49-4A84-ACCE-D23B0222ED0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.0.4","matchCriteriaId":"C25456B9-8BB2-45CC-8544-A6DE51D905F9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"35B65BFA-7D99-412C-AC83-69261BB8EFDA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/105711","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-17445","sourceIdentifier":"cve@mitre.org","published":"2018-10-23T21:30:53.207","lastModified":"2026-06-17T01:45:50.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4."},{"lang":"es","value":"Se ha descubierto un problema de inyección de comandos en Citrix SD-WAN 10.1.0 y NetScaler SD-WAN en versiones 9.3.x anteriores a la 9.3.6 y versiones 10.0.x anteriores a la 10.0.4."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"9.3.0","versionEndIncluding":"9.3.6","matchCriteriaId":"A5A7BC2F-EE49-4A84-ACCE-D23B0222ED0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.0.4","matchCriteriaId":"C25456B9-8BB2-45CC-8544-A6DE51D905F9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"35B65BFA-7D99-412C-AC83-69261BB8EFDA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/105711","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-17446","sourceIdentifier":"cve@mitre.org","published":"2018-10-23T21:30:53.317","lastModified":"2026-06-17T01:45:51.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4."},{"lang":"es","value":"Se ha descubierto un problema de inyección SQL en Citrix SD-WAN 10.1.0 y NetScaler SD-WAN en versiones 9.3.x anteriores a la 9.3.6 y versiones 10.0.x anteriores a la 10.0.4."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"9.3.0","versionEndIncluding":"9.3.6","matchCriteriaId":"A5A7BC2F-EE49-4A84-ACCE-D23B0222ED0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.0.4","matchCriteriaId":"C25456B9-8BB2-45CC-8544-A6DE51D905F9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"35B65BFA-7D99-412C-AC83-69261BB8EFDA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/105711","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-17447","sourceIdentifier":"cve@mitre.org","published":"2018-10-23T21:30:53.393","lastModified":"2026-06-17T01:45:51.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4."},{"lang":"es","value":"Se ha descubierto un problema de exposición de información mediante archivos de registro en Citrix SD-WAN 10.1.0 y NetScaler SD-WAN en versiones 9.3.x anteriores a la 9.3.6 y versiones 10.0.x anteriores a la 10.0.4."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"9.3.0","versionEndExcluding":"9.3.6","matchCriteriaId":"25B3C666-969E-4596-A100-E6B5BCA15B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.4","matchCriteriaId":"810EE1F3-249B-44A3-8296-013E021CB772"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"35B65BFA-7D99-412C-AC83-69261BB8EFDA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/105711","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-17448","sourceIdentifier":"cve@mitre.org","published":"2018-10-23T21:30:53.470","lastModified":"2026-06-17T01:45:51.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4."},{"lang":"es","value":"Se ha descubierto un problema de control de acceso incorrecto en Citrix SD-WAN 10.1.0 y NetScaler SD-WAN en versiones 9.3.x anteriores a la 9.3.6 y versiones 10.0.x anteriores a la 10.0.4."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"9.3.0","versionEndIncluding":"9.3.6","matchCriteriaId":"A5A7BC2F-EE49-4A84-ACCE-D23B0222ED0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.0.4","matchCriteriaId":"C25456B9-8BB2-45CC-8544-A6DE51D905F9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"35B65BFA-7D99-412C-AC83-69261BB8EFDA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/105711","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX236992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-18517","sourceIdentifier":"cve@mitre.org","published":"2018-10-24T21:29:00.967","lastModified":"2026-06-17T01:47:26.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS."},{"lang":"es","value":"Citrix NetScaler Gateway en versiones 10.5.x anteriores a la 10.5.69.003, versiones 11.1.x anteriores a la 11.1.59.004, versiones 12.0.x anteriores a la 12.0.58.7 y versiones 12.1.x anteriores a la 12.1.49.1 tiene Cross-Site Scripting (XSS)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.69.003","matchCriteriaId":"821EDD21-9A34-40D9-A435-5324ED2C6CA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndExcluding":"11.1.59.004","matchCriteriaId":"C74243B3-82C1-4978-9EFB-CEB73C37D3A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.0.58.7","matchCriteriaId":"B3354080-1385-49B6-B497-5211C58FAF39"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndExcluding":"12.1.49.1","matchCriteriaId":"2B9CEEFD-2CEE-450A-97CA-85E7A19A8667"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/105725","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042023","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX239002","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX239002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6485","sourceIdentifier":"cve@mitre.org","published":"2019-02-22T23:29:00.283","lastModified":"2026-06-17T02:39:07.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery Controller (ADC) 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 allow remote attackers to obtain sensitive plaintext information because of a TLS Padding Oracle Vulnerability when CBC-based cipher suites are enabled."},{"lang":"es","value":"Citrix NetScaler Gateway, en versiones 12.1 anteriores a la build 50.31, versiones 12.0 anteriores a la build 60.9, versiones 11.1 anteriores a la build 60.14, versiones 11.0 anteriores a la build 72.17 y en versiones 10.5 anteriores a la build 69.5, así como Application Delivery Controller (ADC), en versiones 12.1 anteriores a la build 50.31, versiones 12.0 anteriores a la build 60.9, versiones 11.1 anteriores a la build 60.14, versiones 11.0 anteriores a la build 72.17 y versiones 10.5 anteriores a la build 69.5 permiten que los atacantes remotos obtengan información sensible en texto plano debido a una vulnerabilidad \"TLS Padding Oracle\" cuando los conjuntos de cifrado basados en CBC están habilitados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.1:*:*:*:*:*:*:*","matchCriteriaId":"58349F8E-3177-413A-9CBE-BB454DCD31E4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D8C7525B-2A2D-43AF-8DA0-11FF28322337"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*","matchCriteriaId":"CB678AF5-12B4-41D0-A381-46EE277313B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"123D42E1-3CDD-4D46-82F6-8982DE716F7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"FFCE3458-6750-4773-BA18-CAA67A6093D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:12.1:*:*:*:*:*:*:*","matchCriteriaId":"28A1E3C0-5A62-4EAC-941C-DFAF0F277E5B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/106783","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/RUB-NDS/TLS-Padding-Oracles","source":"cve@mitre.org","tags":["Product","Third Party Advisory"]},{"url":"https://support.citrix.com/article/CTX240139","source":"cve@mitre.org","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/106783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/RUB-NDS/TLS-Padding-Oracles","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Third Party Advisory"]},{"url":"https://support.citrix.com/article/CTX240139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-10895","sourceIdentifier":"cve@mitre.org","published":"2019-04-09T04:29:01.013","lastModified":"2026-06-17T02:11:50.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation."},{"lang":"es","value":"En Wireshark 2.4.0 a 2.4.13, 2.6.0 a 2.6.7 y 3.0.0, el analizador de archivos de NetScaler puede fallar. Esto se abordó en wiretap/netscaler.c mejorando la validación de los datos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndIncluding":"2.4.13","matchCriteriaId":"065AEA44-0F04-407A-B2ED-11E8F041294C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndIncluding":"2.6.7","matchCriteriaId":"936B7ED4-A639-4E34-A279-F7A740C1A4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"273C667E-1D77-488B-BBF6-7FC763F52182"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*","matchCriteriaId":"D100F7CE-FC64-4CC6-852A-6136D72DA419"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","matchCriteriaId":"07C312A0-CD2C-4B9C-B064-6409B25C278F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","matchCriteriaId":"F1E78106-58E6-4D59-990F-75DA575BFAD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*","matchCriteriaId":"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/107834","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/3986-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2019-09.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/107834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/10/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LYIOOQIMFQ3PA7AFBK4DNXHISTEYUC5/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU3QA2DUO3XS24QE24CQRP4A4XQQY76R/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3986-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2019-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-11550","sourceIdentifier":"cve@mitre.org","published":"2019-05-08T17:29:00.707","lastModified":"2026-06-17T02:13:09.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation."},{"lang":"es","value":"Citrix SD-WAN 10.2.x versiones anteriores a 10.2.1 y NetScaler SD-WAN 10.0.x anteriores a 10.0.7 tienen una validación de certificado incorrecta."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndIncluding":"9.3.6","matchCriteriaId":"85EF90F9-B9CC-4EB1-8F88-229B1602355A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.7","matchCriteriaId":"91CEE91F-0607-4256-8267-DE452E9EFFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndIncluding":"10.1.2","matchCriteriaId":"B635D279-2CF2-4EA7-B84D-012FFCE4CDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0","versionEndExcluding":"10.2.1","matchCriteriaId":"5FEB02F0-4C28-4191-ACDD-72D211CDF714"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX247735","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX247735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-12044","sourceIdentifier":"cve@mitre.org","published":"2019-05-22T16:29:01.243","lastModified":"2026-06-17T02:14:01.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x before 12.1.49.23 and Citrix Application Delivery Controller 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x before 12.1.49.23."},{"lang":"es","value":"Existe un desbordamiento de búfer en Citrix NetScaler Gateway versiones 10.5.x, anteriores 10.5.70.x, versiones 11.1.x, anteriores 11.1.59.10, versiones 12.0.x ,anteriores 12.0.59.8, y versiones 12.1.x anterior 12.1.49.23 y Citrix Application Delivery Controller versiones 10.5.x, anterior 10.5.70.x, versión 11.1.x anterior 11.1.59.10, versión 12.0.x anterior 12.0.59.8,y versión 12.1.x anterior 12.1.49.23."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.70","matchCriteriaId":"BF749290-81B6-4772-A61A-699B6181791D"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndExcluding":"11.1.59.10","matchCriteriaId":"0B4EE820-252E-4137-8B35-842DAB2994F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.0.59.8","matchCriteriaId":"2BDB18E6-DBF6-42E7-A37A-70A96CB24CF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndExcluding":"12.1.49.23","matchCriteriaId":"05C7D109-77A2-47A6-845D-6BCF946999ED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.70","matchCriteriaId":"BF7D848E-A8E5-465F-9F23-A1B6F80D00D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndExcluding":"11.1.59.10","matchCriteriaId":"F5AF866E-4D80-40DE-9166-D1D8799D8754"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.0.59.8","matchCriteriaId":"70220C9E-7F3B-40CE-A8C5-D230803BFC02"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndExcluding":"12.1.49.23","matchCriteriaId":"89196BF4-8CF9-4559-8CC4-9008D64C1C6F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX249976","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX249976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-10883","sourceIdentifier":"cve@mitre.org","published":"2019-06-03T21:29:00.410","lastModified":"2026-06-17T02:11:47.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection."},{"lang":"es","value":"Citrix SD-WAN Center 10.2.x antes de 10.2.1 y NetScaler SD-WAN Center 10.0.x antes de 10.0.7 permite la inyección de comandos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:citrix_sd-wan_center:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndIncluding":"10.1.2","matchCriteriaId":"87684DA4-F640-4713-9748-FBAD768714AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:citrix_sd-wan_center:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0","versionEndExcluding":"10.2.1","matchCriteriaId":"019E6E3E-9A55-4ECC-BA4B-F68565B23DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan_center:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1","versionEndIncluding":"9.3.6","matchCriteriaId":"96779D35-843A-4BEB-8171-AD067CF7F830"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan_center:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.7","matchCriteriaId":"45FF7523-85E4-47C2-B753-4A16A9028984"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX247737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-18","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://support.citrix.com/article/CTX247737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-12985","sourceIdentifier":"cve@mitre.org","published":"2019-07-16T18:15:12.477","lastModified":"2026-06-17T02:15:51.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6)."},{"lang":"es","value":"SD-WAN versiones 10.2.x anteriores a 10.2.3 de Citrix y SD-WAN versiones 10.0.x anteriores a 10.0.8 de NetScaler, presentan una Comprobación de Entrada Inapropiada (problema 1 de 6)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndExcluding":"10.0.8","matchCriteriaId":"4DEA4C6F-F65A-470A-9674-3BDEC9EDC30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.3","matchCriteriaId":"8CED6B7F-0821-4956-9482-E175A500D632"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/109133","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/109133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-12986","sourceIdentifier":"cve@mitre.org","published":"2019-07-16T18:15:12.570","lastModified":"2026-06-17T02:15:51.713","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6)."},{"lang":"es","value":"SD-WAN versiones 10.2.x anteriores a 10.2.3 de Citrix y SD-WAN versiones 10.0.x anteriores a 10.0.8 de NetScaler, presentan una Comprobación de Entrada Inapropiada (problema 2 de 6)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndExcluding":"10.0.8","matchCriteriaId":"4DEA4C6F-F65A-470A-9674-3BDEC9EDC30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.3","matchCriteriaId":"8CED6B7F-0821-4956-9482-E175A500D632"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/109133","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/109133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-12987","sourceIdentifier":"cve@mitre.org","published":"2019-07-16T18:15:12.680","lastModified":"2026-06-17T02:15:51.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6)."},{"lang":"es","value":"SD-WAN versiones 10.2.x anteriores a 10.2.3 de Citrix y SD-WAN versiones 10.0.x anteriores a 10.0.8 de NetScaler, presentan una Comprobación de Entrada Inapropiada (problema 3 de 6)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndExcluding":"10.0.8","matchCriteriaId":"4DEA4C6F-F65A-470A-9674-3BDEC9EDC30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.3","matchCriteriaId":"8CED6B7F-0821-4956-9482-E175A500D632"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/109133","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/109133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-12988","sourceIdentifier":"cve@mitre.org","published":"2019-07-16T18:15:12.787","lastModified":"2026-06-17T02:15:51.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6)."},{"lang":"es","value":"SD-WAN versiones 10.2.x anteriores a 10.2.3 de Citrix y SD-WAN versiones 10.0.x anteriores a 10.0.8 de NetScaler, presentan una Comprobación de Entrada Inapropiada (problema 4 de 6)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndExcluding":"10.0.8","matchCriteriaId":"4DEA4C6F-F65A-470A-9674-3BDEC9EDC30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.3","matchCriteriaId":"8CED6B7F-0821-4956-9482-E175A500D632"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/109133","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/109133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-12989","sourceIdentifier":"cve@mitre.org","published":"2019-07-16T18:15:12.930","lastModified":"2026-06-17T02:15:52.113","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection."},{"lang":"es","value":"SD-WAN versiones 10.2.x anteriores a 10.2.3 de Citrix y SD-WAN versiones 10.0.x anteriores a 10.0.8 de NetScaler, permiten una Inyección SQL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T14:00:03.676351Z","id":"CVE-2019-12989","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-25","cisaActionDue":"2022-04-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Citrix SD-WAN and NetScaler SQL Injection Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.8","matchCriteriaId":"1F303780-1EF9-4D7F-B471-D571DD3972A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0","versionEndExcluding":"10.2.3","matchCriteriaId":"7D7FC7F2-D201-4C8A-B2F3-085123724981"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/109133","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-32","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/109133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-32","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-12989","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2019-12990","sourceIdentifier":"cve@mitre.org","published":"2019-07-16T18:15:13.023","lastModified":"2026-06-17T02:15:52.317","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal."},{"lang":"es","value":"SD-WAN versiones 10.2.x anteriores a 10.2.3 de Citrix y SD-WAN versiones 10.0.x anteriores a 10.0.8 de NetScaler, permiten un Salto de Directorio."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndExcluding":"10.0.8","matchCriteriaId":"4DEA4C6F-F65A-470A-9674-3BDEC9EDC30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.3","matchCriteriaId":"8CED6B7F-0821-4956-9482-E175A500D632"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/109133","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/search?searchQuery=%2A&lang=en&sort=relevance&prod=&pver=&ct=Security+Bulletin","source":"cve@mitre.org"},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/109133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/search?searchQuery=%2A&lang=en&sort=relevance&prod=&pver=&ct=Security+Bulletin","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-12991","sourceIdentifier":"cve@mitre.org","published":"2019-07-16T18:15:13.117","lastModified":"2026-06-17T02:15:52.457","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6)."},{"lang":"es","value":"SD-WAN versiones 10.2.x anteriores a 10.2.3 de Citrix y SD-WAN versiones 10.0.x anteriores a 10.0.8 de NetScaler, presentan una Comprobación de Entrada Inapropiada (problema 5 de 6)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-04T20:36:08.336476Z","id":"CVE-2019-12991","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-25","cisaActionDue":"2022-04-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Citrix SD-WAN and NetScaler Command Injection Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.8","matchCriteriaId":"1F303780-1EF9-4D7F-B471-D571DD3972A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0","versionEndExcluding":"10.2.3","matchCriteriaId":"7D7FC7F2-D201-4C8A-B2F3-085123724981"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/109133","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-32","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/109133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-32","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-12991","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2019-12992","sourceIdentifier":"cve@mitre.org","published":"2019-07-16T18:15:13.210","lastModified":"2026-06-17T02:15:52.667","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6)."},{"lang":"es","value":"SD-WAN versiones 10.2.x anteriores a 10.2.3 de Citrix y SD-WAN versiones 10.0.x anteriores a 10.0.8 de NetScaler, presentan una Comprobación de Entrada Inapropiada (problema 6 de 6)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndExcluding":"10.0.8","matchCriteriaId":"4DEA4C6F-F65A-470A-9674-3BDEC9EDC30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.3","matchCriteriaId":"8CED6B7F-0821-4956-9482-E175A500D632"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/109133","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/109133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX251987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-18225","sourceIdentifier":"cve@mitre.org","published":"2019-10-21T18:15:10.680","lastModified":"2026-06-17T02:24:37.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name."},{"lang":"es","value":"Se detectó un problema en Citrix Application Delivery Controller (ADC) y Gateway versiones anteriores a 10.5 build 70.8, versiones 11.x anteriores a 11.1 build 63.9, versión 12.0 anterior a build 62.10, versión 12.1 anterior a build 54.16 y versión 13.0 anterior a build 41.28. Un atacante con acceso a la interfaz de administración puede omitir la autenticación para obtener acceso administrativo del dispositivo. Estos productos anteriormente usaron la marca NetScaler."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"49454F7D-77B5-46DF-B95C-312AF2E68EAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:12.1:*:*:*:*:*:*:*","matchCriteriaId":"201246D4-1E22-4F28-9683-D6A9FD0F7A6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:13.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A50966-5554-4919-B6CE-BD8F6FF991D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*","matchCriteriaId":"7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:12.1:*:*:*:*:*:*:*","matchCriteriaId":"58349F8E-3177-413A-9CBE-BB454DCD31E4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:gateway_firmware:13.0:*:*:*:*:*:*:*","matchCriteriaId":"A80EAFB1-82DA-49BE-815D-D248624B442C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"3EF98B43-71DB-4230-B7AC-76EC2B1F0533"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX261055","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX261055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-11345","sourceIdentifier":"cve@mitre.org","published":"2020-03-10T14:15:11.427","lastModified":"2026-06-17T02:12:44.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS."},{"lang":"es","value":"Citrix SD-WAN Center versiones 10.2.x anteriores a la versión 10.2.1 y NetScaler SD-WAN Center versiones 10.0.x anteriores a la versión 10.0.7,  permiten un ataque de tipo XSS."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:citrix_sd-wan_center:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0","versionEndExcluding":"10.2.1","matchCriteriaId":"019E6E3E-9A55-4ECC-BA4B-F68565B23DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sd-wan_center:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.7","matchCriteriaId":"45FF7523-85E4-47C2-B753-4A16A9028984"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX247737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX247737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-8245","sourceIdentifier":"support@hackerone.com","published":"2020-09-18T21:15:13.170","lastModified":"2026-06-17T03:26:07.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b leads to an HTML Injection attack against the SSL VPN web portal."},{"lang":"es","value":"Una Comprobación de Entrada inapropiada en Citrix ADC y Citrix Gateway versiones 13.0 anteriores a 13.0-64.35, Citrix ADC y NetScaler Gateway versiones 12.1 anteriores a 12.1-58.15, Citrix ADC versiones 12.1-FIPS anteriores a 12.1-55.187, Citrix ADC y NetScaler Gateway versión 12.0, Citrix ADC y NetScaler Gateway 11.1 antes 11.1-65.12, Citrix SD-WAN WANOP versiones 11.2 anteriores a 11.2.1a, Citrix SD-WAN WANOP versiones 11.1 anteriores a 11.1.2a, Citrix SD-WAN WANOP versiones 11.0 anteriores a 11.0.3f, Citrix SD-WAN WANOP versiones 10.2 anteriores a 10.2.7b, conlleva a un ataque de Inyección HTML contra el portal web SSL VPN"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"Citrix ADC, Citrix Gateway","versions":[{"version":"Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-65.12","matchCriteriaId":"AD2A238E-72C4-4D74-B902-2EE8E602AAC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-58.15","matchCriteriaId":"1C991579-B6B8-4F07-9AF9-739452F1F5AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-64.35","matchCriteriaId":"ED09F4AE-DCC6-4C7D-BFA1-D22E16893C97"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-65.12","matchCriteriaId":"2F98105E-37A4-46F4-BA82-A8E95372A370"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-64.35","matchCriteriaId":"178C6CA9-0068-4225-A209-E13A880ED188"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-58.15","matchCriteriaId":"CFAC08D1-1FE8-4910-9D50-F167537C7C91"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX281474","source":"support@hackerone.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX281474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-8246","sourceIdentifier":"support@hackerone.com","published":"2020-09-18T21:15:13.263","lastModified":"2026-06-17T03:26:07.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to a denial of service attack originating from the management network."},{"lang":"es","value":"Citrix ADC y Citrix Gateway versiones 13.0 anteriores a 13.0-64.35, Citrix ADC y NetScaler Gateway versiones 12.1 anteriores a 12.1-58.15, Citrix ADC versiones 12.1-FIPS anteriores a 12.1-55.187, Citrix ADC y NetScaler Gateway versión 12.0, Citrix ADC y NetScaler Gateway versiones 11.1 anteriores a 11.1-65.12, Citrix SD-WAN WANOP versiones 11.2 anteriores a 11.2.1a, Citrix SD-WAN WANOP versiones 11.1 anteriores a 11.1.2a, Citrix SD-WAN WANOP versiones 11.0 anteriores a 11.0.3f, Citrix SD-WAN WANOP versiones 10.2 anteriores a 10.2.7b, son vulnerables a un ataque de denegación de servicio que se origina en la red de administración"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP","versions":[{"version":"Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-65.12","matchCriteriaId":"AD2A238E-72C4-4D74-B902-2EE8E602AAC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-58.15","matchCriteriaId":"1C991579-B6B8-4F07-9AF9-739452F1F5AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-64.35","matchCriteriaId":"ED09F4AE-DCC6-4C7D-BFA1-D22E16893C97"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-65.12","matchCriteriaId":"2F98105E-37A4-46F4-BA82-A8E95372A370"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-64.35","matchCriteriaId":"178C6CA9-0068-4225-A209-E13A880ED188"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-58.15","matchCriteriaId":"CFAC08D1-1FE8-4910-9D50-F167537C7C91"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.7b","matchCriteriaId":"D76AEFBD-225E-45D3-B604-CAF0032BA861"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndExcluding":"11.0.3f","matchCriteriaId":"7296BF8E-186C-4279-AF08-C3D1282322F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1.2a","matchCriteriaId":"92806100-D243-43CC-ACA7-DF9E95E2740D"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.2","versionEndExcluding":"11.2.1a","matchCriteriaId":"4FB67ED6-6586-4280-A521-E1EDA81C68BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:sd-wan_wanop:-:*:*:*:*:*:*:*","matchCriteriaId":"10F0ACFD-9D48-43F6-A45C-D5F0313BB952"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX281474","source":"support@hackerone.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX281474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-8247","sourceIdentifier":"support@hackerone.com","published":"2020-09-18T21:15:13.327","lastModified":"2026-06-17T03:26:07.663","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to escalation of privileges on the management interface."},{"lang":"es","value":"Citrix ADC y Citrix Gateway versiones 13.0 anteriores a 13.0-64.35, Citrix ADC y NetScaler Gateway versiones 12.1 anteriores a 12.1-58.15, Citrix ADC versiones 12.1-FIPS anteriores a 12.1-55.187, Citrix ADC y NetScaler Gateway versión 12.0, Citrix ADC y NetScaler Gateway versiones 11.1 anteriores a 11.1-65.12, Citrix SD-WAN WANOP versiones 11.2 anteriores a 11.2.1a, Citrix SD-WAN WANOP versiones 11.1 anteriores a 11.1.2a, Citrix SD-WAN WANOP versiones 11.0 anteriores a 11.0.3f, Citrix SD-WAN WANOP versiones 10.2 anteriores a 10.2.7b, son vulnerables a una escalada de privilegios en la interfaz de administración"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP","versions":[{"version":"Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-65.12","matchCriteriaId":"AD2A238E-72C4-4D74-B902-2EE8E602AAC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-58.15","matchCriteriaId":"1C991579-B6B8-4F07-9AF9-739452F1F5AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-64.35","matchCriteriaId":"ED09F4AE-DCC6-4C7D-BFA1-D22E16893C97"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-65.12","matchCriteriaId":"2F98105E-37A4-46F4-BA82-A8E95372A370"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-64.35","matchCriteriaId":"178C6CA9-0068-4225-A209-E13A880ED188"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-58.15","matchCriteriaId":"CFAC08D1-1FE8-4910-9D50-F167537C7C91"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.7b","matchCriteriaId":"D76AEFBD-225E-45D3-B604-CAF0032BA861"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndExcluding":"11.0.3f","matchCriteriaId":"7296BF8E-186C-4279-AF08-C3D1282322F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1.2a","matchCriteriaId":"92806100-D243-43CC-ACA7-DF9E95E2740D"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.2","versionEndExcluding":"11.2.1a","matchCriteriaId":"4FB67ED6-6586-4280-A521-E1EDA81C68BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:sd-wan_wanop:-:*:*:*:*:*:*:*","matchCriteriaId":"10F0ACFD-9D48-43F6-A45C-D5F0313BB952"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX281474","source":"support@hackerone.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX281474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22919","sourceIdentifier":"support@hackerone.com","published":"2021-08-05T21:15:10.997","lastModified":"2026-06-17T03:38:01.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed."},{"lang":"es","value":"Se ha detectado una vulnerabilidad en Citrix ADC (conocido anteriormente como NetScaler ADC) y Citrix Gateway (conocido anteriormente como NetScaler Gateway), y en los modelos 4000-WO, 4100-WO, 5000-WO y 5100-WO de Citrix SD-WAN WANOP Edition. Estas vulnerabilidades, si son explotadas, podrían conllevar a el consumo total del limitado espacio de disco disponible en los dispositivos"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP","versions":[{"version":"Citrix ADC and Citrix Gateway 13.0-82.45 and later releases of 13.0 Citrix ADC and Citrix Gateway 12.1-62.27 and later releases of 12.1 Citrix ADC and NetScaler Gateway 11.1-65.22 and later releases of 11.1 Citrix ADC 12.1-FIPS 12.1-55.247 and later releases of 12.1-FIPS Citrix SD-WAN WANOP Edition 11.4.0a and later releases of 11.4 Citrix SD-WAN WANOP Edition 11.3.2a and later releases of 11.3 Citrix SD-WAN WANOP Edition 11.2.3b and later releases of 11.2 Citrix SD-WAN WANOP Edition 10.2.9b and later releases of 10.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-65.22","matchCriteriaId":"92AEAC43-113D-456B-89C0-1872A67224AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-62.27","matchCriteriaId":"40FC22F7-EA37-48D7-822D-B66EE2B25FE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-82.45","matchCriteriaId":"A1035921-397B-4E88-AF1A-DF581B75B4B2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.238","matchCriteriaId":"8BEBCAD2-581F-4217-8425-46C03584E673"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx\\/sdx_14030_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"BCB11BC1-0702-436F-BFE2-14B38B118D99"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx\\/sdx_14060_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"8569B182-D0A7-414B-B0A3-4DD2FAB44F69"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx\\/sdx_14080_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"ABB9B3E9-EED4-4D74-BE4C-DFAFAB1F0994"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_15030-50g_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"F60729DF-EDC8-4462-ABD2-6E4199F22701"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_15040-50g_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"B789F02A-56CB-4871-9D9D-FAB0F31A72A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_15060-50g_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"06699186-E7E4-463C-8844-77B2A750B985"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_15080-50g_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"F00DBEBF-29BE-4D6A-BF79-19208AAB0D7F"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_15100-50g_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"848169A6-CAD7-4E14-BC5D-B2E94DC93CCB"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_15120-50g_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"3C69709C-885A-4F19-899D-A7B5CE7066EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_8905_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"6B2136C1-8AB6-4C70-87F4-1F8A93A876C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_8910_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"492323D2-339D-404C-BB9B-E09ABB87FA2B"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:mpx_8920_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"AB83185D-DD6F-47CD-B500-499F9EF65093"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-62.27","matchCriteriaId":"4564E909-7F8E-40DF-B941-FFACC03B97B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-82.45","matchCriteriaId":"FB5357D6-4995-4966-8B63-11E636AD58BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-65.22","matchCriteriaId":"CE3B890B-5A0E-4B5A-A9E1-0C6DDF9524E6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.9.b","matchCriteriaId":"A9B222CD-3235-4153-97B0-D8F6FF1FB7BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.2","versionEndExcluding":"11.2.3.b","matchCriteriaId":"22226FCE-A3D3-4FAB-909A-7922AAC3035A"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.3","versionEndExcluding":"11.3.2.a","matchCriteriaId":"C0A54438-E0DA-4134-87FE-D7BFE30A3BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.4","versionEndExcluding":"11.4.0.a","matchCriteriaId":"DB0A1FE7-9F5D-476E-A3E0-2B6260DE0366"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:4000-wo:-:*:*:*:*:*:*:*","matchCriteriaId":"25C848BC-98F7-41D4-A262-8B7EB304F4C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:4100-wo:-:*:*:*:*:*:*:*","matchCriteriaId":"F3979EFF-AE6E-4274-97E2-58C7E01C920E"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:5000-wo:-:*:*:*:*:*:*:*","matchCriteriaId":"C87AF39E-6BCF-4188-BAB1-A5CBDEBF662E"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:5100-wo:-:*:*:*:*:*:*:*","matchCriteriaId":"38514675-1C15-460C-B34C-2633A8A36A78"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX319135","source":"support@hackerone.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX319135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22920","sourceIdentifier":"support@hackerone.com","published":"2021-08-05T21:15:11.083","lastModified":"2026-06-17T03:38:01.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a SAML authentication hijack to steal a valid user session."},{"lang":"es","value":"Se ha detectado una vulnerabilidad en Citrix ADC (antes conocido como NetScaler ADC) y Citrix Gateway (antes conocido como NetScaler Gateway), y en los modelos 4000-WO, 4100-WO, 5000-WO y 5100-WO de Citrix SD-WAN WANOP Edition. Estas vulnerabilidades, si son explotadas, podrían conllevar a un ataque de phishing mediante un secuestro de autenticación SAML para robar una sesión de usuario válida"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"Citrix ADC, Citrix Gateway","versions":[{"version":"Citrix ADC and Citrix Gateway 13.0-82.45 and later releases of 13.0","status":"affected"},{"version":"Citrix ADC and Citrix Gateway 12.1-62.27 and later releases of 12.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:application_delivery_management:12.1-62.25:*:*:*:*:*:*:*","matchCriteriaId":"DE311F5F-CD6A-4539-9941-B7F301BD29C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:application_delivery_management:13.0-82.42:*:*:*:*:*:*:*","matchCriteriaId":"ECDB150A-DC10-4C05-A75A-5EA94E3AE84D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:12.1-62.25:*:*:*:*:*:*:*","matchCriteriaId":"20180A94-DDD7-4EC0-9636-158B935B0938"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:gateway:13.0-82.42:*:*:*:*:*:*:*","matchCriteriaId":"3FF01A30-0E92-43CD-B1BE-B2051EF7B0A6"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX319135","source":"support@hackerone.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX319135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-2858","sourceIdentifier":"cve@gitlab.com","published":"2023-05-26T21:15:18.633","lastModified":"2026-06-17T05:53:38.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file"},{"lang":"es","value":"El fallo del analizador de archivos BLF en Wireshark 4.0.0 a 4.0.5 y 3.6.0 a 3.6.13 permite la denegación de servicio a través de un archivo de captura manipulado."}],"affected":[{"source":"cve@gitlab.com","affectedData":[{"vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"version":">=4.0.0, <4.0.6","status":"affected"},{"version":">=3.6.0, <3.6.14","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T15:39:31.657577Z","id":"CVE-2023-2858","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.14","matchCriteriaId":"CED49BFD-0350-4790-9D15-35875AEE4F00"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.6","matchCriteriaId":"FBA0E5F8-10A3-4294-95A8-6CB594C4DADE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*","matchCriteriaId":"46D69DCC-AE4D-4EA5-861C-D60951444C6C"}]}]}],"references":[{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2858.json","source":"cve@gitlab.com","tags":["Third Party Advisory"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/19081","source":"cve@gitlab.com","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html","source":"cve@gitlab.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202309-02","source":"cve@gitlab.com","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5429","source":"cve@gitlab.com","tags":["Third Party Advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2023-15.html","source":"cve@gitlab.com","tags":["Vendor Advisory"]},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2858.json","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/19081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202309-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2023-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-4966","sourceIdentifier":"secure@citrix.com","published":"2023-10-10T14:15:10.977","lastModified":"2026-07-31T04:16:44.230","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server."},{"lang":"es","value":"Divulgación de información confidencial en NetScaler ADC y NetScaler Gateway cuando se configura como Gateway (servidor virtual VPN, ICA Proxy, CVPN, RDP Proxy) o servidor \"virtual\" AAA."}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"Citrix","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"8.50","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"49.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.19","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.164","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.300","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.300","versionType":"patch","status":"affected"}]},{"vendor":"Citrix","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"8.50","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"49.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.19","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","baseScore":9.4,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-10-10T00:00:00+00:00","id":"CVE-2023-4966","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-10-18","cisaActionDue":"2023-11-08","cisaRequiredAction":"Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.300","matchCriteriaId":"492BEB4B-7A4B-47C2-93D1-2B0683AA3A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.300","matchCriteriaId":"81EF12C2-4197-4C0D-BE11-556F05DAD646"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.19","matchCriteriaId":"9EEC53B2-686A-4C6F-98DE-5D6AE804B0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.164","matchCriteriaId":"109301A8-9ADD-4A49-9C45-D21A4DA840E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-49.15","matchCriteriaId":"5C1739C5-48C1-46BC-A524-B4CC4C5B6436"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-8.50","matchCriteriaId":"9148C36D-98B4-4166-8B9A-449EA86BA4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.19","matchCriteriaId":"5FB1412D-F8D8-4592-A8A9-C1B841B93D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-49.15","matchCriteriaId":"28A08B32-D145-499F-866E-BEEEDEBB2901"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-8.50","matchCriteriaId":"4F1610E6-FE48-4339-8E74-765E0517E33D"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html","source":"secure@citrix.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX579459","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX579459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4966","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-4967","sourceIdentifier":"secure@citrix.com","published":"2023-10-27T19:15:41.620","lastModified":"2026-06-17T06:38:59.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server"},{"lang":"es","value":"Denegación de Servicio (DoS) en NetScaler ADC y NetScaler Gateway cuando se configura como Gateway (servidor virtual VPN, proxy ICA, CVPN, proxy RDP) o Servidor Virtual AAA"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"Cloud Software Group","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"8.50","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"49.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.19","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.164","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.300","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.300","versionType":"patch","status":"affected"}]},{"vendor":"Cloud Software Group","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"8.50","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"49.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.19","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-26T21:50:03.367350Z","id":"CVE-2023-4967","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.19","matchCriteriaId":"2409DF4E-68CB-4B8D-BA47-D68A3ABCBBF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-49.15","matchCriteriaId":"3343FD78-6DC8-40CC-A349-FB98654EEE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-8.50","matchCriteriaId":"46848B81-A561-47FC-A0C9-7C4A9E896F7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.19","matchCriteriaId":"5FB1412D-F8D8-4592-A8A9-C1B841B93D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-49.15","matchCriteriaId":"28A08B32-D145-499F-866E-BEEEDEBB2901"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-8.50","matchCriteriaId":"4F1610E6-FE48-4339-8E74-765E0517E33D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndIncluding":"12.1-55.300","matchCriteriaId":"ACB785DB-4EDF-4A7D-A6CE-B473E2598C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndIncluding":"12.1-55.300","matchCriteriaId":"A2265F5D-6B66-4597-984E-1E479384A2CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndIncluding":"13.1-37.164","matchCriteriaId":"29C01D44-FAA8-48DF-8877-FA7F56FFE0A3"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX579459/","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX579459/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-6548","sourceIdentifier":"secure@citrix.com","published":"2024-01-17T20:15:50.627","lastModified":"2026-06-17T06:50:58.003","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface."},{"lang":"es","value":"El control inadecuado de la generación de código (\"inyección de código\") en NetScaler ADC y NetScaler Gateway permite a un atacante con acceso a NSIP, CLIP o SNIP con interfaz de administración realizar una ejecución remota de código autenticado (con privilegios bajos) en Management Interface."}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"Cloud Software Group","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"12.35","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"51.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.21","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.176","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.302","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.302","versionType":"patch","status":"affected"}]},{"vendor":"Cloud Software Group","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"12.35","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"51.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.21","versionType":"patch","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1:*:*:*:-:*:*:*"],"versions":[{"version":"14.1","lessThan":"14.1-12.35","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1:*:*:*:-:*:*:*"],"versions":[{"version":"13.1","lessThan":"13.1-51.15","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.0:*:*:*:-:*:*:*"],"versions":[{"version":"13.0","lessThan":"13.0-92.21","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1:*:*:*:fips:*:*:*"],"versions":[{"version":"13.1","lessThan":"13.1-37.176","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1:*:*:*:fips:*:*:*"],"versions":[{"version":"12.1","lessThan":"12.1-55.302","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1:*:*:*:ndcpp:*:*:*"],"versions":[{"version":"12.1","lessThan":"12.1-55.302","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_gateway:14.1:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"14.1-12.35","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_gateway:13.1:*:*:*:*:*:*:*"],"versions":[{"version":"13.1","lessThan":"13.1-51.15","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_gateway:13.0:*:*:*:*:*:*:*"],"versions":[{"version":"13.0","lessThan":"13.0-92.21","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.1,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-18T14:00:57.375485Z","id":"CVE-2023-6548","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-01-17","cisaActionDue":"2024-01-24","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.302","matchCriteriaId":"E5672003-8E6B-4316-B5C9-FE436080ADD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.302","matchCriteriaId":"D1A11ABD-4F45-4BA9-B30B-F1D8A612CC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.21","matchCriteriaId":"FC0A5AAC-62DD-416A-A801-A7A95D5EF73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.176","matchCriteriaId":"8C8A6B95-8338-4EE7-A6EC-7D84AEDC4AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-51.15","matchCriteriaId":"3CF77D9D-FC89-493D-B97D-F9699D182F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-12.35","matchCriteriaId":"62CD82CF-9013-4E54-B175-19B804A351AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.21","matchCriteriaId":"68E1F810-ABCD-40A7-A8C1-4E8727799C7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-51.15","matchCriteriaId":"E870C309-D5CD-4181-9DEB-4833DE2EAEB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-12.35","matchCriteriaId":"2836707F-A36F-479E-BFDC-CF55AEFC37EE"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6548","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-6549","sourceIdentifier":"secure@citrix.com","published":"2024-01-17T21:15:11.690","lastModified":"2026-06-17T06:50:58.160","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read"},{"lang":"es","value":"La restricción inadecuada de las operaciones dentro de los límites de un búfer de memoria en NetScaler ADC y NetScaler Gateway permite una denegación de servicio no autenticada"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"Cloud Software Group","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"12.35","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"51.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.21","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.176","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.302","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.302","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-31T05:00:20.477654Z","id":"CVE-2023-6549","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-01-17","cisaActionDue":"2024-02-07","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.302","matchCriteriaId":"E5672003-8E6B-4316-B5C9-FE436080ADD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.302","matchCriteriaId":"D1A11ABD-4F45-4BA9-B30B-F1D8A612CC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.21","matchCriteriaId":"FC0A5AAC-62DD-416A-A801-A7A95D5EF73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.176","matchCriteriaId":"8C8A6B95-8338-4EE7-A6EC-7D84AEDC4AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-51.15","matchCriteriaId":"3CF77D9D-FC89-493D-B97D-F9699D182F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-12.35","matchCriteriaId":"62CD82CF-9013-4E54-B175-19B804A351AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.21","matchCriteriaId":"68E1F810-ABCD-40A7-A8C1-4E8727799C7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-51.15","matchCriteriaId":"E870C309-D5CD-4181-9DEB-4833DE2EAEB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-12.35","matchCriteriaId":"2836707F-A36F-479E-BFDC-CF55AEFC37EE"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6549","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2024-5491","sourceIdentifier":"secure@citrix.com","published":"2024-07-10T19:15:11.190","lastModified":"2026-06-17T08:16:03.093","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler"},{"lang":"es","value":"Denegación de servicio en NetScaler ADC y NetScaler Gateway en NetScaler"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"25.53","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"53.17","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.183","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.304","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.304","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"25.53","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"53.17","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-10T20:25:24.933103Z","id":"CVE-2024-5491","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.304","matchCriteriaId":"817B0ACA-8E2B-47CC-81B9-A3D623FE5B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.304","matchCriteriaId":"2F1F1189-FA1B-4B72-BAA7-A70BCE71DB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.0-92.31","matchCriteriaId":"425AD5C8-E126-4BE1-9FC2-FDE3EEC85175"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.183","matchCriteriaId":"5A4A9E3F-5C62-42F7-9EA7-043B45518D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-53.17","matchCriteriaId":"7CBCB1C9-3212-49EA-BBA7-42E619C33D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-25.53","matchCriteriaId":"B4A8DCB9-804B-4B68-A91C-170288C1C18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.0-92.31","matchCriteriaId":"67CB7BF3-ADCC-4CB8-B622-7E0DA9B7D68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-53.17","matchCriteriaId":"47EF52BA-49BE-4FFB-9073-F8B15CC87C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-25.53","matchCriteriaId":"F49E675E-EC43-4286-8791-9B0B6864DEB9"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492","source":"secure@citrix.com","tags":["Broken Link"]},{"url":"https://support.citrix.com/external/article?articleUrl=CTX677944-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492","source":"nvd@nist.gov","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2024-5492","sourceIdentifier":"secure@citrix.com","published":"2024-07-10T19:15:11.293","lastModified":"2026-06-17T08:16:03.220","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway"},{"lang":"es","value":"La vulnerabilidad de redireccionamiento abierto permite a un atacante remoto no autenticado redirigir a los usuarios a sitios web arbitrarios en NetScaler ADC y NetScaler Gateway."}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetSclaer","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"25.53","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"53.17","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.13","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.183","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.304","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.304","versionType":"patch","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"14.1-25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"13.1-53.17","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"13.0-92.31","versionType":"custom","status":"affected"},{"version":"13.1-FIPS","lessThan":"13.1-37.183","versionType":"custom","status":"affected"},{"version":"12.1-FIPS","lessThan":"12.1-55.304","versionType":"custom","status":"affected"},{"version":"12.1-NDcPP","lessThan":"12.1-55.304","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"14.1-25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"13.1-53.17","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"13.0-92.31","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-12T20:06:46.037235Z","id":"CVE-2024-5492","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.304","matchCriteriaId":"817B0ACA-8E2B-47CC-81B9-A3D623FE5B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.304","matchCriteriaId":"2F1F1189-FA1B-4B72-BAA7-A70BCE71DB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.0-92.31","matchCriteriaId":"425AD5C8-E126-4BE1-9FC2-FDE3EEC85175"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.183","matchCriteriaId":"5A4A9E3F-5C62-42F7-9EA7-043B45518D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-53.17","matchCriteriaId":"7CBCB1C9-3212-49EA-BBA7-42E619C33D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-25.53","matchCriteriaId":"B4A8DCB9-804B-4B68-A91C-170288C1C18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.0-92.31","matchCriteriaId":"67CB7BF3-ADCC-4CB8-B622-7E0DA9B7D68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-53.17","matchCriteriaId":"47EF52BA-49BE-4FFB-9073-F8B15CC87C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-25.53","matchCriteriaId":"F49E675E-EC43-4286-8791-9B0B6864DEB9"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492","source":"secure@citrix.com","tags":["Broken Link"]},{"url":"https://support.citrix.com/external/article?articleUrl=CTX677944-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492","source":"nvd@nist.gov","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2024-6236","sourceIdentifier":"secure@citrix.com","published":"2024-07-10T21:15:11.120","lastModified":"2026-06-17T08:17:35.860","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of Service   in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX"},{"lang":"es","value":"Denegación de servicio en NetScaler Console (anteriormente NetScaler ADM), NetScaler Agent y NetScaler SDX"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetSclaer","product":"NetScaler Console","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"25.53","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Agent","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"25.53","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"SDX","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"25.53","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"patch","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"netscaler","product":"netscaler_console","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:netscaler_console:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"netscaler_console","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:netscaler_console:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"netscaler_console","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:netscaler_console:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"agent","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:agent:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"agent","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:agent:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"agent","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:agent:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"sdx","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:sdx:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"sdx","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:sdx:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"sdx","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:sdx:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"25.53","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"52.25","versionType":"custom","status":"affected"},{"version":"13.0","lessThan":"92.31","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-16T17:23:21.359193Z","id":"CVE-2024-6236","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0-58.30","versionEndExcluding":"13.0-92.31","matchCriteriaId":"F4FA76A8-E953-4751-B7A8-ADC2FC226997"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1-4.43","versionEndExcluding":"13.1-53.22","matchCriteriaId":"6981F122-C2AA-4D21-B83C-F499EA6629DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1-4.42","versionEndExcluding":"14.1-25.53","matchCriteriaId":"5EC59DDE-6DB6-4CF4-AEE1-27410D7FE010"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0-58.30","versionEndExcluding":"13.0-92.31","matchCriteriaId":"2A922EC2-62D0-4877-B82F-9CB49CD97F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1-4.43","versionEndExcluding":"13.1-53.22","matchCriteriaId":"2A85282E-98F2-4A48-9213-80D82BBA9C2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1-4.42","versionEndExcluding":"14.1-25.53","matchCriteriaId":"D9A1C950-BACE-44C1-B0D5-F00F46D280F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0-91.12","versionEndExcluding":"13.0-92.31","matchCriteriaId":"10E845C6-2516-4DBB-9A8F-1EB852B93EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1-49.13","versionEndExcluding":"13.1-53.17","matchCriteriaId":"F24241B9-7586-4BC8-87B0-11F60190676E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1-4.42","versionEndExcluding":"14.1-25.53","matchCriteriaId":"3A55F7F3-B702-48E9-B8BD-8D85A850B76E"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX677998","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX677998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-8534","sourceIdentifier":"secure@citrix.com","published":"2024-11-12T19:15:18.907","lastModified":"2026-06-17T08:22:48.560","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled"},{"lang":"es","value":"Vulnerabilidad de seguridad de la memoria que provoca corrupción de memoria y denegación de servicio en NetScaler ADC y Gateway si el dispositivo debe configurarse como un Gateway (VPN Vserver) con la función RDP habilitada O el dispositivo debe configurarse como un Gateway (VPN Vserver) y se crea un perfil de servidor proxy RDP y se configura como Gateway (VPN Vserver) O el dispositivo debe configurarse como un servidor de autenticación (AAA Vserver) con la función RDP habilitada"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetSclaer","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"29.72","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.207","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.321","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.321","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"29.72","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.207","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.321","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.321","versionType":"patch","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"netscaler","product":"adc","defaultStatus":"unaffected","cpes":["cpe:2.3:a:netscaler:adc:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"14.1-29.72","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:gateway:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"14.1-29.72","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"adc","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:adc:*:*:*:*:*:*:*:*"],"versions":[{"version":"13.1","lessThan":"13.1-55.34","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"netscaler-adc_13.1-fips","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:netscaler-adc_13.1-fips:*:*:*:*:*:*:*:*"],"versions":[{"version":"13.1","lessThan":"13.1-37.207","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"netscaler-adc_12.1-fips","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:netscaler-adc_12.1-fips:12.1:*:*:*:*:*:*:*"],"versions":[{"version":"12.1","lessThan":"12.1-55.321","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"netscaler-adc_12.1-ndcpp","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:netscaler-adc_12.1-ndcpp:12.1:*:*:*:*:*:*:*"],"versions":[{"version":"12.1","lessThan":"12.1-55.321","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T14:38:35.887321Z","id":"CVE-2024-8534","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.321","matchCriteriaId":"F5EE3463-C7DB-493D-A14E-7A8891B903D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.321","matchCriteriaId":"1EAF1004-344C-4A0A-A1B6-A8932D763724"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.1-55.34","matchCriteriaId":"0F832616-B768-4B98-AF21-3C32CB1F9A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.207","matchCriteriaId":"23A038D6-AA3B-4833-AEE8-0DCE05DC21E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-29.72","matchCriteriaId":"29410A07-D4E1-4D0F-BC78-4A2323325370"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.1-55.34","matchCriteriaId":"B767B864-9D9B-4C28-A216-570E8835D466"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-29.72","matchCriteriaId":"3E814029-E1B3-48E7-847E-B5A522D06780"}]}]}],"references":[{"url":"https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US","source":"secure@citrix.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-8535","sourceIdentifier":"secure@citrix.com","published":"2024-11-12T19:15:19.040","lastModified":"2026-06-17T08:22:48.703","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver)  with KCDAccount configuration for Kerberos SSO to access backend resources"},{"lang":"es","value":"El usuario autenticado puede acceder a las capacidades de usuario no deseadas en NetScaler ADC y NetScaler Gateway si el dispositivo debe configurarse como un Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) con configuración de KCDAccount para Kerberos SSO para acceder a los recursos del backend O el dispositivo debe configurarse como un servidor de autenticación (AAA Vserver) con configuración de KCDAccount para Kerberos SSO para acceder a los recursos del backend "}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"29.72","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"patch","status":"affected"},{"version":"13.1 FIPS","lessThan":"37.207","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.321","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.321","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"29.72","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.207","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.321","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.321","versionType":"patch","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"netscaler","product":"adc","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:adc:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"29.72","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"custom","status":"affected"},{"version":"13.1fips","lessThan":"37.207","versionType":"custom","status":"affected"},{"version":"12.1-fips","lessThan":"55.321","versionType":"custom","status":"affected"},{"version":"12.1-ndcpp","lessThan":"55.321","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:gateway:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"29.72","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"custom","status":"affected"},{"version":"13.1fips","lessThan":"37.207","versionType":"custom","status":"affected"},{"version":"12.1-fips","lessThan":"55.321","versionType":"custom","status":"affected"},{"version":"12.1-ndcpp","lessThan":"55.321","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T20:05:08.852710Z","id":"CVE-2024-8535","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-552"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.321","matchCriteriaId":"F5EE3463-C7DB-493D-A14E-7A8891B903D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.321","matchCriteriaId":"1EAF1004-344C-4A0A-A1B6-A8932D763724"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.1-55.34","matchCriteriaId":"0F832616-B768-4B98-AF21-3C32CB1F9A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.207","matchCriteriaId":"23A038D6-AA3B-4833-AEE8-0DCE05DC21E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-29.72","matchCriteriaId":"29410A07-D4E1-4D0F-BC78-4A2323325370"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.1-55.34","matchCriteriaId":"B767B864-9D9B-4C28-A216-570E8835D466"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-29.72","matchCriteriaId":"3E814029-E1B3-48E7-847E-B5A522D06780"}]}]}],"references":[{"url":"https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US","source":"secure@citrix.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-12284","sourceIdentifier":"secure@citrix.com","published":"2025-02-20T00:15:19.360","lastModified":"2026-06-17T06:59:25.453","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows."},{"lang":"es","value":"La escalada de privilegios autenticado en NetScaler Console and NetScaler Agent permiten."}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"Console","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"38.53","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"56.18","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Agent","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"38.53","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"56.18","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-21T04:56:15.456863Z","id":"CVE-2024-12284","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_agent:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1-4.43","versionEndExcluding":"13.1-56.18","matchCriteriaId":"50F009DC-47A2-4366-81DF-A2F923BF93C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_agent:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1-4.42","versionEndExcluding":"14.1-38.53","matchCriteriaId":"EAE55DAD-34F8-4B34-855D-D13BAFD4A133"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_agent:13.0-58.30:*:*:*:-:*:*:*","matchCriteriaId":"A84CD230-F26C-4E2D-AA9C-70BB679FA896"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build12.50:*:*:*:*:*:*","matchCriteriaId":"527D1878-0C2B-434F-A1D6-DF7A3D675A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build17.42:*:*:*:*:*:*","matchCriteriaId":"838758F6-D771-4D0B-A546-749106C25C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build21.53:*:*:*:*:*:*","matchCriteriaId":"DDAA78E3-0C5E-45BD-B533-D0B45D5CFB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build24.38:*:*:*:*:*:*","matchCriteriaId":"11C375C3-9D70-415D-98AE-701781ED30B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build27.62:*:*:*:*:*:*","matchCriteriaId":"6B42BCE1-E54E-4200-B5DF-433CF305154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build30.52:*:*:*:*:*:*","matchCriteriaId":"9B9CF88F-C690-4E1C-8E51-7BDAA28D3666"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build33.50:*:*:*:*:*:*","matchCriteriaId":"6191E4B9-B834-45F2-BB15-A04D6EBAED95"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build37.38:*:*:*:*:*:*","matchCriteriaId":"9D9E3754-72B5-435A-ADA0-BD2FFD7F2898"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build4.43:*:*:*:*:*:*","matchCriteriaId":"B4F0BCBB-F395-4F00-B91C-287D39A87667"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build42.47:*:*:*:*:*:*","matchCriteriaId":"5ED3480C-D055-42C7-AAC1-6736606CACB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build45.61:*:*:*:*:*:*","matchCriteriaId":"F8075841-E12D-4C43-A1A2-BC5E6FFB7EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build48.47:*:*:*:*:*:*","matchCriteriaId":"5E907D22-46A0-4C7F-94BF-8E9C186839CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build49.13:*:*:*:*:*:*","matchCriteriaId":"B20B6A3F-758D-4C7C-AAD3-619FD8FEA4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build50.23:*:*:*:*:*:*","matchCriteriaId":"B46219C9-8BA8-472C-831F-5F65310BF579"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build51.14:*:*:*:*:*:*","matchCriteriaId":"A1D23E60-E279-4BB8-AEFB-44F586A72D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build52.19:*:*:*:*:*:*","matchCriteriaId":"434E5007-D75E-42F4-B1EA-F909C073F741"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build53.22:*:*:*:*:*:*","matchCriteriaId":"CCDB957F-D87B-489B-A1E1-478A9A0E4591"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build53.24:*:*:*:*:*:*","matchCriteriaId":"F0710246-66E7-429F-93E1-1A2EB3A32225"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build54.29:*:*:*:*:*:*","matchCriteriaId":"AEFD9728-312E-4E12-9B6A-1C5E0DF0851A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build55.29:*:*:*:*:*:*","matchCriteriaId":"B37F4601-7314-43AA-AEA7-FEEB29F9CCB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build12.34:*:*:*:*:*:*","matchCriteriaId":"7242C119-6545-41FF-9A0C-ECF51B52A6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build17.38:*:*:*:*:*:*","matchCriteriaId":"B5CD7FA6-9084-457B-BEB8-38BF4CBD4743"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build21.60:*:*:*:*:*:*","matchCriteriaId":"B88BABA6-7FB7-4D9D-AAF1-78A78FFA62A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build25.53:*:*:*:*:*:*","matchCriteriaId":"E7BC70E9-5466-4A86-A21F-5AAF8BB4B1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build25.56:*:*:*:*:*:*","matchCriteriaId":"87A64984-3867-4336-970A-ABF9F1784A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build29.63:*:*:*:*:*:*","matchCriteriaId":"D6D997DC-A4E6-4D96-AA19-70186C4681DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build34.43:*:*:*:*:*:*","matchCriteriaId":"A2FA3D8F-AE48-4A08-8305-82E28F9F1055"}]}]}],"references":[{"url":"https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US","source":"secure@citrix.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-4365","sourceIdentifier":"secure@citrix.com","published":"2025-06-17T13:15:20.690","lastModified":"2026-06-17T09:33:07.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)"},{"lang":"es","value":"Lectura de archivos arbitrarios en NetScaler Console y NetScaler SDX (SVM)"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"Console","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.46","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"58.32","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"SDX (SVM)","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.46","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"58.32","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-17T13:44:12.219691Z","id":"CVE-2025-4365","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build12.50:*:*:*:*:*:*","matchCriteriaId":"527D1878-0C2B-434F-A1D6-DF7A3D675A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build17.42:*:*:*:*:*:*","matchCriteriaId":"838758F6-D771-4D0B-A546-749106C25C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build21.53:*:*:*:*:*:*","matchCriteriaId":"DDAA78E3-0C5E-45BD-B533-D0B45D5CFB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build24.38:*:*:*:*:*:*","matchCriteriaId":"11C375C3-9D70-415D-98AE-701781ED30B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build27.62:*:*:*:*:*:*","matchCriteriaId":"6B42BCE1-E54E-4200-B5DF-433CF305154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build30.52:*:*:*:*:*:*","matchCriteriaId":"9B9CF88F-C690-4E1C-8E51-7BDAA28D3666"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build33.50:*:*:*:*:*:*","matchCriteriaId":"6191E4B9-B834-45F2-BB15-A04D6EBAED95"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build37.38:*:*:*:*:*:*","matchCriteriaId":"9D9E3754-72B5-435A-ADA0-BD2FFD7F2898"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build4.43:*:*:*:*:*:*","matchCriteriaId":"B4F0BCBB-F395-4F00-B91C-287D39A87667"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build42.47:*:*:*:*:*:*","matchCriteriaId":"5ED3480C-D055-42C7-AAC1-6736606CACB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build45.61:*:*:*:*:*:*","matchCriteriaId":"F8075841-E12D-4C43-A1A2-BC5E6FFB7EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build48.47:*:*:*:*:*:*","matchCriteriaId":"5E907D22-46A0-4C7F-94BF-8E9C186839CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build49.13:*:*:*:*:*:*","matchCriteriaId":"B20B6A3F-758D-4C7C-AAD3-619FD8FEA4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build50.23:*:*:*:*:*:*","matchCriteriaId":"B46219C9-8BA8-472C-831F-5F65310BF579"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build51.14:*:*:*:*:*:*","matchCriteriaId":"A1D23E60-E279-4BB8-AEFB-44F586A72D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build52.19:*:*:*:*:*:*","matchCriteriaId":"434E5007-D75E-42F4-B1EA-F909C073F741"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build53.22:*:*:*:*:*:*","matchCriteriaId":"CCDB957F-D87B-489B-A1E1-478A9A0E4591"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build53.24:*:*:*:*:*:*","matchCriteriaId":"F0710246-66E7-429F-93E1-1A2EB3A32225"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build54.29:*:*:*:*:*:*","matchCriteriaId":"AEFD9728-312E-4E12-9B6A-1C5E0DF0851A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build55.29:*:*:*:*:*:*","matchCriteriaId":"B37F4601-7314-43AA-AEA7-FEEB29F9CCB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build56.18:*:*:*:*:*:*","matchCriteriaId":"68EF1AED-B857-4A78-B2F8-E3352A66FEB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build57.26:*:*:*:*:*:*","matchCriteriaId":"D925082E-C6F4-45BD-B3E9-D09190B609E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build58.21:*:*:*:*:*:*","matchCriteriaId":"22B2A2C2-F723-4C40-B1BF-379329ACEB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:13.1:build9.60:*:*:*:*:*:*","matchCriteriaId":"7A554392-EBB7-4D7A-8D77-7DF5DD879984"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build12.34:*:*:*:*:*:*","matchCriteriaId":"7242C119-6545-41FF-9A0C-ECF51B52A6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build17.38:*:*:*:*:*:*","matchCriteriaId":"B5CD7FA6-9084-457B-BEB8-38BF4CBD4743"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build21.60:*:*:*:*:*:*","matchCriteriaId":"B88BABA6-7FB7-4D9D-AAF1-78A78FFA62A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build25.53:*:*:*:*:*:*","matchCriteriaId":"E7BC70E9-5466-4A86-A21F-5AAF8BB4B1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build25.56:*:*:*:*:*:*","matchCriteriaId":"87A64984-3867-4336-970A-ABF9F1784A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build29.63:*:*:*:*:*:*","matchCriteriaId":"D6D997DC-A4E6-4D96-AA19-70186C4681DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build34.43:*:*:*:*:*:*","matchCriteriaId":"A2FA3D8F-AE48-4A08-8305-82E28F9F1055"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build38.53:*:*:*:*:*:*","matchCriteriaId":"B42F1382-BDB0-4F35-93F2-398B473B7A8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build4.42:*:*:*:*:*:*","matchCriteriaId":"EB2F50DC-2059-40E2-9152-4A1E070F0308"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build43.50:*:*:*:*:*:*","matchCriteriaId":"992A6A76-A896-479F-9D67-C13F4F2DE926"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_console:14.1:build8.50:*:*:*:*:*:*","matchCriteriaId":"58C4A663-0A87-4149-BDFB-2143E880F0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1-49.13","versionEndExcluding":"13.1-58.32","matchCriteriaId":"EF3557CA-7B04-41B6-9013-6348D8375191"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1-4.42","versionEndExcluding":"14.1-47.46","matchCriteriaId":"376D7E97-B555-424A-A7ED-EEE7E769ED3E"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729","source":"secure@citrix.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-5349","sourceIdentifier":"secure@citrix.com","published":"2025-06-17T13:15:21.377","lastModified":"2026-06-17T09:47:44.240","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway"},{"lang":"es","value":"Control de acceso inadecuado en la interfaz de administración de NetScaler en NetScaler ADC y NetScaler Gateway"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"43.56","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"58.32","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-26T03:55:23.351695Z","id":"CVE-2025-5349","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.328","matchCriteriaId":"D907BEC2-6930-4989-A6E1-847B4763BB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.235","matchCriteriaId":"7AF5A6EE-84A9-42AA-BC4B-7C3367D08CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.235","matchCriteriaId":"E219F46B-FCBE-4DA2-9094-6ED128E8AF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-58.32","matchCriteriaId":"48A64F62-2A5A-40CB-A507-A48497BD749A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-43.56","matchCriteriaId":"6484AA47-81F8-4EE6-9F33-96DEFE2F66E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-58.32","matchCriteriaId":"2C86D66F-888F-4519-B700-9ADC4EE6913C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-43.56","matchCriteriaId":"D4E61FAA-9EAB-4F9B-887F-C5DC0DA0C633"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420","source":"secure@citrix.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-6543","sourceIdentifier":"secure@citrix.com","published":"2025-06-25T13:15:27.293","lastModified":"2026-06-17T10:02:07.007","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server"},{"lang":"es","value":"Vulnerabilidad de desbordamiento de memoria que provoca un flujo de control no deseado y una denegación de servicio en NetScaler ADC y NetScaler Gateway cuando se configuran como Gateway (servidor virtual VPN, proxy ICA, CVPN, proxy RDP) O servidor virtual AAA"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.46","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"59.19","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.236","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.46","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"59.19","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.236","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.2,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-17T03:55:32.992762Z","id":"CVE-2025-6543","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-06-30","cisaActionDue":"2025-07-21","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.236","matchCriteriaId":"0F079648-790A-4D18-908D-25CA575C5B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.236","matchCriteriaId":"CF89AD2E-8A0A-43A9-9EEB-83D595576775"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-59.19","matchCriteriaId":"355DCB05-54E3-4C13-A74A-B27CE3F10597"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-47.46","matchCriteriaId":"4A26624D-7F3F-4FD7-AC50-C9BDCA656F7B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-59.19","matchCriteriaId":"598029C6-734C-450C-A7EC-495C72819E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-47.46","matchCriteriaId":"D977C8AE-4B4E-474D-ABD6-F55F054E5B59"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6543","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-7775","sourceIdentifier":"secure@citrix.com","published":"2025-08-26T13:15:32.870","lastModified":"2026-06-17T10:05:38.060","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX"},{"lang":"es","value":"Vulnerabilidad de desbordamiento de memoria que provoca ejecución remota de código o denegación de servicio en NetScaler ADC y NetScaler Gateway cuando NetScaler está configurado como Gateway (servidor virtual VPN, proxy ICA, CVPN, proxy RDP) o servidor virtual AAA (O) NetScaler ADC y NetScaler Gateway 13.1, 14.1, 13.1-FIPS y NDcPP: servidores virtuales LB de tipo (HTTP, SSL o HTTP_QUIC) vinculados con servicios IPv6 o grupos de servicios vinculados con servidores IPv6 (O) NetScaler ADC y NetScaler Gateway 13.1, 14.1, 13.1-FIPS y NDcPP: servidores virtuales LB de tipo (HTTP, SSL o HTTP_QUIC) vinculados con servicios IPv6 DBS o grupos de servicios vinculados con servidores DBS IPv6 (O) servidor virtual CR de tipo HDX"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.48","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"59.22","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.241","versionType":"patch","status":"affected"},{"version":"12.1 FIPS and NDcPP","lessThan":"55.330","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.48","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"59.22","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.241","versionType":"patch","status":"affected"},{"version":"12.1 FIPS and NDcPP","lessThan":"55.330","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.2,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-27T03:55:14.429609Z","id":"CVE-2025-7775","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-08-26","cisaActionDue":"2025-08-28","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler Memory Overflow Vulnerability","weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.330","matchCriteriaId":"5920186A-2278-4C5E-A2EE-047C4F6FAACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.330","matchCriteriaId":"E09EC98B-E057-4FF7-9B18-EF460A29B876"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.241","matchCriteriaId":"0096548F-A846-4D80-A4C6-71389543630F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.241","matchCriteriaId":"F40E29F2-8013-41A8-91A5-848FE6365876"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-59.22","matchCriteriaId":"C2009493-AAFD-4090-84BC-5217A860E42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-47.48","matchCriteriaId":"3487EADF-F387-4DD4-B600-B1EBC416632E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-59.22","matchCriteriaId":"DBA34500-BFE6-4B33-A52B-326C4C2069B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-47.48","matchCriteriaId":"004E06F6-0ABF-4414-B2A2-8834C1E6107D"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-7775","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-7776","sourceIdentifier":"secure@citrix.com","published":"2025-08-26T13:15:33.193","lastModified":"2026-06-17T10:05:38.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it"},{"lang":"es","value":"Vulnerabilidad de desbordamiento de memoria que genera un comportamiento impredecible o erróneo y una denegación de servicio en NetScaler ADC y NetScaler Gateway cuando NetScaler está configurado como un Gateway (servidor virtual VPN, proxy ICA, CVPN, proxy RDP) con un perfil PCoIP vinculado a él."}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.48","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"59.22","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.241","versionType":"patch","status":"affected"},{"version":"12.1 FIPS and NDcPP","lessThan":"55.330","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.48","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"59.22","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.241","versionType":"patch","status":"affected"},{"version":"12.1 FIPS and NDcPP","lessThan":"55.330","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-27T14:33:04.448715Z","id":"CVE-2025-7776","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.330","matchCriteriaId":"5920186A-2278-4C5E-A2EE-047C4F6FAACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.330","matchCriteriaId":"E09EC98B-E057-4FF7-9B18-EF460A29B876"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.241","matchCriteriaId":"0096548F-A846-4D80-A4C6-71389543630F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.241","matchCriteriaId":"F40E29F2-8013-41A8-91A5-848FE6365876"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-59.22","matchCriteriaId":"C2009493-AAFD-4090-84BC-5217A860E42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-47.48","matchCriteriaId":"3487EADF-F387-4DD4-B600-B1EBC416632E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-59.22","matchCriteriaId":"DBA34500-BFE6-4B33-A52B-326C4C2069B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-47.48","matchCriteriaId":"004E06F6-0ABF-4414-B2A2-8834C1E6107D"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938","source":"secure@citrix.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-8424","sourceIdentifier":"secure@citrix.com","published":"2025-08-26T14:15:44.740","lastModified":"2026-06-17T10:06:57.597","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access"},{"lang":"es","value":"Control de acceso inadecuado en la interfaz de administración de NetScaler en NetScaler ADC y NetScaler Gateway cuando un atacante puede obtener acceso a la NSIP del dispositivo, la IP de administración del clúster o la IP del sitio GSLB local o SNIP con acceso de administración"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.48","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"59.22","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.241","versionType":"patch","status":"affected"},{"version":"12.1 FIPS and NDcPP","lessThan":"55.330","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"47.48","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"59.22","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.241","versionType":"patch","status":"affected"},{"version":"12.1 FIPS and NDcPP","lessThan":"55.330","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-27T03:55:15.625808Z","id":"CVE-2025-8424","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1284"}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938","source":"secure@citrix.com"}]}},{"cve":{"id":"CVE-2025-12101","sourceIdentifier":"secure@citrix.com","published":"2025-11-11T14:15:35.110","lastModified":"2026-06-17T08:31:43.357","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server"}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"56.73","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"60.32","versionType":"patch","status":"affected"},{"version":"13.1-FIPS and NDcPP","lessThan":"37.250","versionType":"patch","status":"affected"},{"version":"12.1-FIPS and NDcPP","lessThan":"55.333","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"56.73","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"60.32","versionType":"patch","status":"affected"},{"version":"13.1-FIPS and NDcPP","lessThan":"37.250","versionType":"patch","status":"affected"},{"version":"12.1-FIPS and NDcPP","lessThan":"55.333","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"ACTIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-12T14:54:37.426494Z","id":"CVE-2025-12101","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695486","source":"secure@citrix.com"}]}},{"cve":{"id":"CVE-2026-3055","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-03-23T21:17:17.477","lastModified":"2026-06-17T10:42:58.157","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread"},{"lang":"es","value":"Validación de entrada insuficiente en NetScaler ADC y NetScaler Gateway cuando se configura como un IDP SAML, lo que lleva a una sobrelectura de memoria."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"66.59","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"62.23","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.262","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"66.59","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"62.23","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-23T00:00:00+00:00","id":"CVE-2026-3055","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-03-30","cisaActionDue":"2026-04-02","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler Out-of-Bounds Read Vulnerability","weaknesses":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.262","matchCriteriaId":"453E034F-91B1-48E0-A0C2-4DE99EA221DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.262","matchCriteriaId":"5C536886-5796-4FB4-BB94-BE34DE32339A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-62.23","matchCriteriaId":"E2DFB77E-B610-4FAC-84EB-CAB9D68F16F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-60.58","matchCriteriaId":"F1145E85-5AEC-4584-A385-1DAA2084CD9F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-62.23","matchCriteriaId":"46A54BC1-9EA0-4F74-81D1-48FB04AE4479"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-60.58","matchCriteriaId":"FEA94A98-44D9-4A3A-8713-7A4963CD820B"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]},{"url":"https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-4368","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-03-23T21:17:17.667","lastModified":"2026-06-17T10:56:29.243","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mixup"},{"lang":"es","value":"Condición de carrera en NetScaler ADC y NetScaler Gateway cuando el dispositivo está configurado como Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) o servidor virtual AAA, lo que lleva a la mezcla de sesiones de usuario."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1.66.54","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1.66.54","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-24T03:56:06.911644Z","id":"CVE-2026-4368","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-362"}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}]}},{"cve":{"id":"CVE-2026-10816","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-06-30T13:17:04.220","lastModified":"2026-07-02T16:58:45.447","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled"}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"},{"version":"14.1 FIPS","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.272","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-30T13:28:37.909957Z","id":"CVE-2026-10816","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","description":[{"lang":"en","value":"CWE-73"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-610"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D8189708-5190-45E3-BF9A-7A429E87DFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D93A5760-5C50-4786-B981-24A7B35C3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"BC139A27-D7CE-4D92-9A1F-09713C4C9546"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"0108075C-1047-449C-A707-F2532770C2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*","matchCriteriaId":"A2BC089B-97D0-4FDB-A336-74409DCDC5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"962D2276-7285-41E2-A867-D464AE11677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"1591FBCE-57DD-416F-A858-E898B0946AB6"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-10817","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-06-30T13:17:04.363","lastModified":"2026-07-02T16:57:03.933","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler"}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"},{"version":"14.1 FIPS","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.272","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-30T13:28:08.900923Z","id":"CVE-2026-10817","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D8189708-5190-45E3-BF9A-7A429E87DFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D93A5760-5C50-4786-B981-24A7B35C3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"BC139A27-D7CE-4D92-9A1F-09713C4C9546"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"0108075C-1047-449C-A707-F2532770C2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*","matchCriteriaId":"A2BC089B-97D0-4FDB-A336-74409DCDC5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"962D2276-7285-41E2-A867-D464AE11677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"1591FBCE-57DD-416F-A858-E898B0946AB6"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-13474","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-06-30T13:17:09.610","lastModified":"2026-07-02T16:55:37.127","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler"}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"},{"version":"14.1 FIPS","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.272","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-30T13:27:19.468802Z","id":"CVE-2026-13474","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D8189708-5190-45E3-BF9A-7A429E87DFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D93A5760-5C50-4786-B981-24A7B35C3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"BC139A27-D7CE-4D92-9A1F-09713C4C9546"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"0108075C-1047-449C-A707-F2532770C2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*","matchCriteriaId":"A2BC089B-97D0-4FDB-A336-74409DCDC5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"962D2276-7285-41E2-A867-D464AE11677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"1591FBCE-57DD-416F-A858-E898B0946AB6"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-8451","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-06-30T13:19:33.347","lastModified":"2026-07-01T15:52:58.800","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP"}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"},{"version":"14.1 FIPs","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.272","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-30T13:43:33.940474Z","id":"CVE-2026-8451","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D8189708-5190-45E3-BF9A-7A429E87DFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D93A5760-5C50-4786-B981-24A7B35C3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"BC139A27-D7CE-4D92-9A1F-09713C4C9546"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"0108075C-1047-449C-A707-F2532770C2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*","matchCriteriaId":"A2BC089B-97D0-4FDB-A336-74409DCDC5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"962D2276-7285-41E2-A867-D464AE11677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"1591FBCE-57DD-416F-A858-E898B0946AB6"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-8452","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-06-30T13:19:33.450","lastModified":"2026-08-27T04:18:00.787","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server"}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"},{"version":"14.1 FIPS","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.272","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-26T00:00:00+00:00","id":"CVE-2026-8452","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-08-26","cisaActionDue":"2026-08-29","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D8189708-5190-45E3-BF9A-7A429E87DFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D93A5760-5C50-4786-B981-24A7B35C3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"BC139A27-D7CE-4D92-9A1F-09713C4C9546"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"0108075C-1047-449C-A707-F2532770C2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*","matchCriteriaId":"A2BC089B-97D0-4FDB-A336-74409DCDC5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"962D2276-7285-41E2-A867-D464AE11677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"1591FBCE-57DD-416F-A858-E898B0946AB6"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8452","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-8655","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-06-30T13:19:34.083","lastModified":"2026-07-01T15:52:05.703","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment"}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"},{"version":"14.1 FIPS","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1 FIPS and NDcPP","lessThan":"37.272","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"72.61","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"63.18","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-30T13:33:42.732082Z","id":"CVE-2026-8655","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D8189708-5190-45E3-BF9A-7A429E87DFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionEndExcluding":"13.1-37.272","matchCriteriaId":"D93A5760-5C50-4786-B981-24A7B35C3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"BC139A27-D7CE-4D92-9A1F-09713C4C9546"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"0108075C-1047-449C-A707-F2532770C2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*","matchCriteriaId":"A2BC089B-97D0-4FDB-A336-74409DCDC5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.18","matchCriteriaId":"962D2276-7285-41E2-A867-D464AE11677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-72.61","matchCriteriaId":"1591FBCE-57DD-416F-A858-E898B0946AB6"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-19489","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-08-19T13:17:44.870","lastModified":"2026-09-01T21:03:04.987","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThanOrEqual":"73.32","versionType":"patch","status":"affected"},{"version":"13.1","lessThanOrEqual":"63.21","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThanOrEqual":"73.32","versionType":"patch","status":"affected"},{"version":"13.1","lessThanOrEqual":"63.21","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-20T13:36:23.963103Z","id":"CVE-2026-19489","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}]}},{"cve":{"id":"CVE-2026-19490","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-08-19T13:17:45.000","lastModified":"2026-10-07T19:17:36.500","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThanOrEqual":"73.32","versionType":"patch","status":"affected"},{"version":"13.1","lessThanOrEqual":"63.21","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThanOrEqual":"73.32","versionType":"patch","status":"affected"},{"version":"13.1","lessThanOrEqual":"63.21","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-10T03:55:17.447903Z","id":"CVE-2026-19490","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-09-09","cisaActionDue":"2026-09-12","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability","weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.277","matchCriteriaId":"2F90F173-E24C-4189-87FF-2157DBBECE4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.277","matchCriteriaId":"2CD7AEA1-F0D9-47E9-A4BF-6E72E2083934"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.21","matchCriteriaId":"07826E3F-A0BA-42DB-97DD-677E2F1E99B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.32","matchCriteriaId":"12664220-1266-43A3-A5B9-011E06C56A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.32","matchCriteriaId":"98857F06-6895-4454-A52D-E200D2109B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-63.21","matchCriteriaId":"0ACEC99D-8145-45D4-BFCC-ADC11999D2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.32","matchCriteriaId":"45606A9C-06AF-4A4B-80B4-CB1A29230C85"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-19490","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-88771","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-09-27T17:16:56.260","lastModified":"2026-09-29T04:18:01.603","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands."},{"lang":"es","value":"Vulnerabilidad de validación de entrada inadecuada en Citrix NetScaler ADC y Citrix NetScaler Gateway.\n\nEste problema afecta a ADC en versiones anteriores a 14.1-73.37, 13.1-64.23, 14.1-73.37 FIPS, y 13.1.37.279 FIPS y NDcPP; y a Gateway en versiones anteriores a 14.1-73.37 y 13.1-64.23, lo que permite a un atacante no autenticado ejecutar comandos arbitrarios."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"Citrix NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"},{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1.37.279 FIPS and NDcPP","versionType":"patch","status":"affected"}]},{"vendor":"Citrix NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.5,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-27T00:00:00+00:00","id":"CVE-2026-88771","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-09-27","cisaActionDue":"2026-09-30","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Citrix NetScaler Improper Input Validation Vulnerability","weaknesses":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"6BC2D462-9ABE-4024-8E46-8D265C0B19FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"2DB314FE-3886-4ABD-A820-B8A70EBB23A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.37","matchCriteriaId":"046FF602-D956-4961-89BF-2041A3590004"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"C77243A7-1FDB-4557-88BE-EDF3BAA56A81"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-88772","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-09-27T17:16:56.390","lastModified":"2026-09-28T12:26:47.670","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service"},{"lang":"es","value":"Vulnerabilidad en Citrix NetScaler ADC y Citrix NetScaler Gateway.\n\nEste problema afecta a ADC: versiones anteriores a 14.1-73.37, a 13.1-64.23, a 14.1-73.37 FIPS, y a 13.1.37.279 FIPS y NDcPP; Gateway: versiones anteriores a 14.1-73.37 y a 13.1-64.23, lo que conduce a Ejecución remota de código o Denegación de servicio."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"Citrix NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"},{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1.37.279 FIPS and NDcPP","versionType":"patch","status":"affected"}]},{"vendor":"Citrix NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.5,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-27T00:00:00+00:00","id":"CVE-2026-88772","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-09-27","cisaActionDue":"2026-09-30","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"6BC2D462-9ABE-4024-8E46-8D265C0B19FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"2DB314FE-3886-4ABD-A820-B8A70EBB23A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.37","matchCriteriaId":"046FF602-D956-4961-89BF-2041A3590004"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"C77243A7-1FDB-4557-88BE-EDF3BAA56A81"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-88773","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-09-27T17:16:56.507","lastModified":"2026-09-29T16:17:13.370","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23."},{"lang":"es","value":"Vulnerabilidad de interpretación inconsistente de solicitudes HTTP ('contrabando de solicitudes/respuestas HTTP') en Citrix NetScaler ADC y Citrix NetScaler Gateway.\n\nEste problema afecta a ADC: antes de 14.1-73.37, antes de 13.1-64.23, antes de 14.1-73.37 FIPS, y antes de 13.1-37.279 y NDcPP; Gateway: antes de 14.1-73.37 FIPS y antes de 13.1-64.23."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"Citrix NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1-37.279 and NDcPP","versionType":"Patch","status":"affected"}]},{"vendor":"Citrix NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"Patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.8}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T15:17:32.077580Z","id":"CVE-2026-88773","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","description":[{"lang":"en","value":"CWE-444"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"6BC2D462-9ABE-4024-8E46-8D265C0B19FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"2DB314FE-3886-4ABD-A820-B8A70EBB23A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.37","matchCriteriaId":"046FF602-D956-4961-89BF-2041A3590004"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"C77243A7-1FDB-4557-88BE-EDF3BAA56A81"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-88774","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-09-27T17:16:56.633","lastModified":"2026-09-29T16:17:13.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage."},{"lang":"es","value":"Vulnerabilidad en Citrix NetScaler ADC y Citrix NetScaler Gateway.\n\nEste problema afecta a ADC: antes de 14.1-73.37, antes de 13.1-64.23, antes de 14.1-73.37 FIPS, y antes de 13.1.37.279 FIPS y NDcPP; Gateway: antes de 14.1-73.37 y antes de 13.1-64.23, lo que lleva a una omisión de la política de características debido a un uso incorrecto de expresiones basadas en URL HTTP."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"Citrix NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"},{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1.37.279 FIPS and NDcPP","versionType":"patch","status":"affected"}]},{"vendor":"Citrix NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T15:22:52.478269Z","id":"CVE-2026-88774","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"6BC2D462-9ABE-4024-8E46-8D265C0B19FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"2DB314FE-3886-4ABD-A820-B8A70EBB23A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.37","matchCriteriaId":"046FF602-D956-4961-89BF-2041A3590004"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"C77243A7-1FDB-4557-88BE-EDF3BAA56A81"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-88775","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-09-27T17:16:56.750","lastModified":"2026-09-29T16:17:13.663","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service"},{"lang":"es","value":"Vulnerabilidad de desbordamiento de memoria en Citrix NetScaler ADC y Citrix NetScaler Gateway.\n\nEste problema afecta a ADC: anteriores a 14.1-73.37, anteriores a 13.1-64.23, anteriores a 14.1-73.37 FIPS, y anteriores a 13.1.37.279 FIPS y NDcPP; Gateway: anteriores a 14.1-73.37 y anteriores a 13.1-64.23, lo que provoca una vulnerabilidad de desbordamiento de memoria que conduce a un comportamiento impredecible o erróneo o a una denegación de servicio."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"Citrix NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"},{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1.37.279 FIPS and NDcPP","versionType":"patch","status":"affected"}]},{"vendor":"Citrix NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T15:14:54.128931Z","id":"CVE-2026-88775","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"6BC2D462-9ABE-4024-8E46-8D265C0B19FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"2DB314FE-3886-4ABD-A820-B8A70EBB23A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.37","matchCriteriaId":"046FF602-D956-4961-89BF-2041A3590004"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"C77243A7-1FDB-4557-88BE-EDF3BAA56A81"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-88776","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-09-27T17:16:56.870","lastModified":"2026-09-29T17:17:11.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23  leading to unpredictable or erroneous behavior or Denial of Service"},{"lang":"es","value":"Vulnerabilidad de desbordamiento de memoria en Citrix NetScaler ADC y Citrix NetScaler Gateway.\nEste problema afecta a ADC: versiones anteriores a 14.1-73.37, anteriores a 13.1-64.23, anteriores a 14.1-73.37 FIPS, y anteriores a 13.1.37.279 FIPS y NDcPP; Gateway: versiones anteriores a 14.1-73.37 y anteriores a 13.1-64.23, lo que lleva a un comportamiento impredecible o erróneo o a una denegación de servicio."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"Citrix NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"},{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1.37.279 FIPS and NDcPP","versionType":"patch","status":"affected"}]},{"vendor":"Citrix NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T15:11:33.607861Z","id":"CVE-2026-88776","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"6BC2D462-9ABE-4024-8E46-8D265C0B19FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"2DB314FE-3886-4ABD-A820-B8A70EBB23A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.37","matchCriteriaId":"046FF602-D956-4961-89BF-2041A3590004"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"C77243A7-1FDB-4557-88BE-EDF3BAA56A81"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-88777","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-09-27T17:16:56.990","lastModified":"2026-09-29T22:19:03.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23  leading to unpredictable or erroneous behavior or Denial of Service"},{"lang":"es","value":"Vulnerabilidad de desbordamiento de memoria en Citrix NetScaler ADC y Citrix NetScaler Gateway.\n\nEste problema afecta a ADC: versiones anteriores a 14.1-73.37, anteriores a 13.1-64.23, anteriores a 14.1-73.37 FIPS, y anteriores a 13.1.37.279 FIPS y NDcPP; Gateway: versiones anteriores a 14.1-73.37 y anteriores a 13.1-64.23, lo que lleva a un comportamiento impredecible o erróneo o a una denegación de servicio."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"Citrix NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"},{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1.37.279 FIPS and NDcPP","versionType":"patch","status":"affected"}]},{"vendor":"Citrix NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T15:07:18.195758Z","id":"CVE-2026-88777","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"6BC2D462-9ABE-4024-8E46-8D265C0B19FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"2DB314FE-3886-4ABD-A820-B8A70EBB23A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.37","matchCriteriaId":"046FF602-D956-4961-89BF-2041A3590004"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"C77243A7-1FDB-4557-88BE-EDF3BAA56A81"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-88778","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-09-27T17:16:57.110","lastModified":"2026-09-29T17:17:12.020","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23."},{"lang":"es","value":"Vulnerabilidad de valor exacto predecible a partir de valores anteriores en Citrix NetScaler ADC y Citrix NetScaler Gateway.\n\nEste problema afecta a ADC: versiones anteriores a 14.1-73.37, anteriores a 13.1-64.23, anteriores a 14.1-73.37 FIPS, y anteriores a 13.1.37.279 FIPS y NDcPP; Gateway: versiones anteriores a 14.1-73.37 y anteriores a 13.1-64.23."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"Citrix NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"14.1-73.37 FIPS","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1.37.279 FIPS and NDcPP","versionType":"Patch","status":"affected"}]},{"vendor":"Citrix NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.37","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1-64.23","versionType":"Patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T16:34:20.349812Z","id":"CVE-2026-88778","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","description":[{"lang":"en","value":"CWE-342"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"6BC2D462-9ABE-4024-8E46-8D265C0B19FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"2DB314FE-3886-4ABD-A820-B8A70EBB23A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1.37.279","matchCriteriaId":"FCFFA1B3-87CE-4CC8-990E-D3CE0B55CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"1CA9588A-E3EB-44FC-9515-6EB89BB8C1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.37","matchCriteriaId":"046FF602-D956-4961-89BF-2041A3590004"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.23","matchCriteriaId":"3286D2C3-EA7E-4D9C-95DE-05D462DC8B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.37","matchCriteriaId":"C77243A7-1FDB-4557-88BE-EDF3BAA56A81"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-88779","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-10-04T04:16:43.680","lastModified":"2026-10-05T13:35:24.663","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28."}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.41","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1-64.28","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"14.1-73.41 FIPS","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1-37.282","versionType":"Patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.41","versionType":"Patch","status":"affected"},{"version":"0","lessThan":"13.1-64.28","versionType":"Patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-04T00:00:00+00:00","id":"CVE-2026-88779","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-10-04","cisaActionDue":"2026-10-07","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.282","matchCriteriaId":"3BBEE3C6-8CDE-4E13-8D7F-1DC21DE216B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.282","matchCriteriaId":"6F6A3D5D-1861-4974-B091-26E87FB1D6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.28","matchCriteriaId":"1A3802BF-8836-4B1C-9C5E-BE6492D42847"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.41","matchCriteriaId":"92D219C6-E418-4AC1-9D9D-20F939914F0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"14.1-66.68","versionEndIncluding":"14.1-73.41","matchCriteriaId":"EBB3AD2A-AAE0-4A56-A36D-A327EB39792A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-64.28","matchCriteriaId":"C4B364B5-3ED9-4C84-9D09-6C79D7A66E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-73.41","matchCriteriaId":"33BB8BC4-DFDF-4760-9C92-129615BE7831"}]}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","tags":["Vendor Advisory"]},{"url":"https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88779","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-107406","sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","published":"2026-10-08T22:17:26.847","lastModified":"2026-10-10T04:18:09.503","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.\n\n\nNetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:\n\n\n\n \n\n  *  For the following versions: Applicable only when configured as a SAML IdP:\n  *  NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive\n  *  NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive\n  *  NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive\n  *  NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive\n\n\n\n\n \n\n\n\nFor the following versions: Applicable only when configured as a SAML SP or SAML IdP:\n\n  *  NetScaler ADC and NetScaler Gateway before 14.1-73.37 \n  *  NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS \n  *  NetScaler ADC and NetScaler Gateway before 13.1-64.23\n  *  NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279"}],"affected":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","affectedData":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.46","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.29","versionType":"patch","status":"affected"},{"version":"0","lessThan":"14.1-73.46 FIPS","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1.37.283 FIPS","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"14.1-73.46","versionType":"patch","status":"affected"},{"version":"0","lessThan":"13.1-64.29","versionType":"patch","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.5,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-09T00:00:00+00:00","id":"CVE-2026-107406","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697191","source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"},{"url":"https://community.citrix.com/techzone-blogs/110_security-updates/protecting-customers-immediate-guidance-for-cve-2026-107406-in-netscaler-adc-and-netscaler-gateway-r1631/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}}]}