CVE-2022-27509

MEDIUM

Citrix Gateway and Application Delivery Controller Firmware 12.1 - Unauthenticated Open Redirect

Title source: llm
STIX 2.1

Description

Unauthenticated redirection to a malicious website

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.citrix.com/article/CTX457836

Scores

CVSS v3 6.1
EPSS 0.0033
EPSS Percentile 56.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-601
Status published
Products (3)
citrix/application_delivery_controller_firmware 12.1 - 12.1-55.282 (2 CPE variants)
citrix/application_delivery_controller_firmware 12.1 - 12.1-65.15
citrix/gateway 12.1 - 12.1-65.15
Published Jul 28, 2022
Tracked Since Feb 18, 2026