Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

citrix netscaler firmware - vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2018-7218
The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote malicious users to execute arbitrary code via unspecified ve...
Citrix Application Delivery Controller Firmware 11.0Citrix Application Delivery Controller Firmware 11.1Citrix Application Delivery Controller Firmware 12.0Citrix Application Delivery Controller Firmware 10.5Citrix Netscaler Gateway Firmware 11.0Citrix Netscaler Gateway Firmware 12.0Citrix Netscaler Gateway Firmware 10.5Citrix Netscaler Gateway Firmware 11.1
8.1
CVSSv3
CVE-2013-3619
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interfa...
Supermicro Smt X9 FirmwareSupermicro Smt X8 FirmwareCitrix Netscaler Sdx Firmware 10Citrix Netscaler Firmware -Citrix Netscaler Sd-wan Firmware -
7.5
CVSSv3
CVE-2013-3620
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards prior to 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
Supermicro Smt X9 FirmwareSupermicro Smt X8 FirmwareCitrix Netscaler Sdx Firmware 10Citrix Netscaler Firmware -Citrix Netscaler Sd-wan Firmware -
7.2
CVSSv3
CVE-2017-14602
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12...
Citrix Application Delivery Controller Firmware 12.0Citrix Application Delivery Controller Firmware 10.1Citrix Netscaler Gateway Firmware 11.1Citrix Netscaler Gateway Firmware 10.5eCitrix Application Delivery Controller Firmware 10.5eCitrix Application Delivery Controller Firmware 10.5Citrix Netscaler Gateway Firmware 12.0Citrix Netscaler Gateway Firmware 10.1Citrix Netscaler Gateway Firmware 11.0Citrix Application Delivery Controller Firmware 11.0Citrix Application Delivery Controller Firmware 11.1Citrix Netscaler Gateway Firmware 10.5
6.5
CVSSv3
CVE-2009-2213
The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and previous versions specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to...
Citrix Netscaler Access Gateway FirmwareCitrix Netscaler Access Gateway Firmware 7.0Citrix Netscaler Access Gateway Firmware 8.0Citrix Netscaler Access Gateway Firmware 9.0Citrix Netscaler Access Gateway -
6.1
CVSSv3
CVE-2018-6811
Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote malicious users to inject arbitrary web script or HTML via the Citrix NetScaler interface.
Citrix Netscaler Application Delivery Controller Firmware 11.0Citrix Netscaler Application Delivery Controller Firmware 12.0Citrix Netscaler Application Delivery Controller Firmware 10.5Citrix Netscaler Application Delivery Controller Firmware 11.1Citrix Netscaler Gateway Firmware 10.5Citrix Netscaler Gateway Firmware 11.0Citrix Netscaler Gateway Firmware 11.1Citrix Netscaler Gateway Firmware 12.0
5.9
CVSSv3
CVE-2017-17382
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote malicious users to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA...
Citrix Application Delivery Controller Firmware 10.5Citrix Application Delivery Controller Firmware 11.1Citrix Application Delivery Controller Firmware 12.0Citrix Application Delivery Controller Firmware 11.0Citrix Netscaler Gateway Firmware 11.1Citrix Netscaler Gateway Firmware 10.5Citrix Netscaler Gateway Firmware 11.0Citrix Netscaler Gateway Firmware 12.0
5.9
CVSSv3
CVE-2017-17549
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote malicious users to obtain sensitive information from the backend client TLS handshake b...
Citrix Application Delivery Controller Firmware 10.5Citrix Application Delivery Controller Firmware 11.0Citrix Application Delivery Controller Firmware 11.1Citrix Application Delivery Controller Firmware 12.0Citrix Netscaler Gateway Firmware 10.5Citrix Netscaler Gateway Firmware 11.1Citrix Netscaler Gateway Firmware 12.0Citrix Netscaler Gateway Firmware 11.0
5.9
CVSSv3
CVE-2015-3642
The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x prior to 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, ...
Citrix Netscaler Application Delivery Controller -Citrix Netscaler Gateway -
5.9
CVSSv3
CVE-2017-5933
Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote malicious users to obtain the GCM authentication key and spoof data by levera...
Citrix Netscaler Application Delivery Controller Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
firmwareCVE-2023-52866CVE-2024-4367CVE-2024-1721CVE-2023-34992XML injectionCVE-2023-52817SQLCVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook