Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

citrix netscaler access gateway - vulnerabilities and exploits

(subscribe to this query)
4.9
CVSSv2
CVE-2014-8580
Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 prior to 10.5-52.11, 10.1.122.17 prior to 10.1-129.11, and 10.1-120.1316.e prior to 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access "network ...
Citrix Netscaler Gateway Firmware 10.1.122Citrix Netscaler Gateway Firmware 10.1.123Citrix Netscaler Application Delivery Controller Firmware 10.1.120.1316.eCitrix Netscaler Application Delivery Controller Firmware 10.1.121Citrix Netscaler Application Delivery Controller Firmware 10.1.128Citrix Netscaler Application Delivery Controller Firmware 10.1.129Citrix Netscaler Gateway Firmware 10.1.120.1316.eCitrix Netscaler Gateway Firmware 10.1.121Citrix Netscaler Gateway Firmware 10.1.128Citrix Netscaler Gateway Firmware 10.1.129Citrix Netscaler Application Delivery Controller Firmware 10.1.126Citrix Netscaler Application Delivery Controller Firmware 10.1.127Citrix Netscaler Gateway Firmware 10.1.126Citrix Netscaler Gateway Firmware 10.1.127Citrix Netscaler Application Delivery Controller Firmware 10.1.124Citrix Netscaler Application Delivery Controller Firmware 10.1.125Citrix Netscaler Application Delivery Controller Firmware 10.5.51.10Citrix Netscaler Gateway Firmware 10.1.124Citrix Netscaler Gateway Firmware 10.1.125Citrix Netscaler Application Delivery Controller Firmware 10.1.122Citrix Netscaler Application Delivery Controller Firmware 10.1.123Citrix Netscaler Gateway Firmware 10.5.50.10
9
CVSSv2
CVE-2017-14602
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12...
Citrix Application Delivery Controller Firmware 12.0Citrix Application Delivery Controller Firmware 10.1Citrix Netscaler Gateway Firmware 11.1Citrix Netscaler Gateway Firmware 10.5eCitrix Application Delivery Controller Firmware 10.5eCitrix Application Delivery Controller Firmware 10.5Citrix Netscaler Gateway Firmware 12.0Citrix Netscaler Gateway Firmware 10.1Citrix Netscaler Gateway Firmware 11.0Citrix Application Delivery Controller Firmware 11.0Citrix Application Delivery Controller Firmware 11.1Citrix Netscaler Gateway Firmware 10.5
4.3
CVSSv2
CVE-2020-8300
Citrix ADC and Citrix/NetScaler Gateway prior to 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS prior to 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC ...
Citrix Netscaler GatewayCitrix GatewayCitrix Application Delivery Controller Firmware
NA
CVE-2023-6548
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Citrix Netscaler GatewayCitrix Netscaler Application Delivery Controller
9
CVSSv2
CVE-2018-6186
Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges.
Citrix Netscaler 12.0
5.4
CVSSv2
CVE-2013-2767
Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) prior to 9.3.62.4 and 10.x up to and including 10.0.74.4, and NetScaler AGEE Common Criteria build prior to 9.3.53.6, allows remote malicious users to bypass intended intranet access restrictio...
Citrix Netscaler Access Gateway Firmware 10.0Citrix Netscaler Access Gateway Firmware 10.0.74.4Citrix Netscaler Access Gateway Firmware 9.3Citrix Netscaler Access Gateway Firmware 9.2Citrix Netscaler Access Gateway Firmware 9.1Citrix Netscaler Access Gateway FirmwareCitrix Netscaler Access Gateway -
4.3
CVSSv2
CVE-2021-22956
An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RP...
Citrix Application Delivery Controller FirmwareCitrix GatewayCitrix Sd-wan
5
CVSSv2
CVE-2014-4347
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) prior to 9.3-62.4 and 10.x prior to 10.1-126.12 allows malicious users to obtain sensitive information via vectors related to a cookie.
Citrix Netscaler Access Gateway Firmware 10.1Citrix Netscaler Access Gateway Firmware 9.3Citrix Netscaler Access Gateway -Citrix Netscaler Application Delivery Controller Firmware 9.3Citrix Netscaler Application Delivery Controller Firmware 10.1Citrix Netscaler Application Delivery Controller -
4.3
CVSSv2
CVE-2014-4346
Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 prior to 10.1-126.12 allows remote malicious users to inject arbitrary web s...
Citrix Netscaler Application Delivery Controller Firmware 10.1Citrix Netscaler Application Delivery Controller -Citrix Netscaler Access Gateway Firmware 10.1Citrix Netscaler Access Gateway -
5
CVSSv2
CVE-2020-8193
Improper access control in Citrix ADC and Citrix Gateway versions prior to 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions prior to 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.
Citrix Application Delivery Controller FirmwareCitrix Netscaler Gateway FirmwareCitrix Gateway FirmwareCitrix Sd-wan Wanop
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook