CVE-2018-17446

CRITICAL

Citrix NetScaler SD-WAN 9.3.0-9.3.5 and 10.0.0-10.0.3 - SQL Injection

Title source: llm

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

Core 2

Core References

Vendor Advisory x_refsource_confirm

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 9.8

EPSS 0.0048

EPSS Percentile 65.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Status published

Products (2)

citrix/netscaler_sd-wan 9.3.0 - 9.3.6

citrix/sd-wan 10.1.0

Published Oct 23, 2018

Tracked Since Feb 18, 2026