Citrix Vulnerabilities and Affected Products
Vulnerabilities associated with Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance.
Products
Clear product- NetScaler ADC and NetScaler Gateway15 vulnerabilities
- SD-WAN and NetScaler7 vulnerabilities
- Citrix Workspace app for Windows5 vulnerabilities
- virtual_apps_and_desktops5 vulnerabilities
- Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance4 vulnerabilities
- Citrix Gateway, Citrix ADC4 vulnerabilities
- NetScaler ADC4 vulnerabilities
- NetScaler Gateway4 vulnerabilities
- ShareFile4 vulnerabilities
- application_delivery_controller_firmware2 vulnerabilities
- Citrix ADC and Citrix Gateway2 vulnerabilities
- Citrix Application Delivery Management (Citrix ADM)2 vulnerabilities
- Citrix Secure Access Client for Windows2 vulnerabilities
- Citrix Workspace app for HTML52 vulnerabilities
- NetScaler2 vulnerabilities
- NetScaler ADC and Gateway2 vulnerabilities
- netscaler_application_delivery_controller2 vulnerabilities
- netscaler_gateway2 vulnerabilities
- Secure Access Client for Mac2 vulnerabilities
- Secure Access Client for Windows2 vulnerabilities
- secure_access_client2 vulnerabilities
- Session Recording2 vulnerabilities
- workspace_app2 vulnerabilities
- Application Delivery Controller (ADC) and Gateway1 vulnerability
- Citrix Endpoint Analysis Client for Windows1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-8196MEDIUM | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure VulnerabilityImproper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users. | CVSS4.3v3.1 | EPSS26.3% | PoCs1 | SignalsListed in CISA KEVKnown ransomware useNo Nuclei templates | STIX |
CVE-2020-8195MEDIUM | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure VulnerabilityImproper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users. | CVSS6.5v3.1 | EPSS33.3% | PoCs1 | SignalsListed in CISA KEVKnown ransomware useNo Nuclei templates | STIX |
CVE-2020-8193MEDIUM | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass VulnerabilityImproper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints. | CVSS6.5v3.1 | EPSS88.4% | PoCs5 | SignalsListed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2019-19781CRITICAL | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityAn issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. | CVSS9.8v3.1 | EPSS>99.9% | PoCs49 | SignalsListed in CISA KEVKnown ransomware use1 Nuclei template | STIX |