{"id":"CVE-2019-9548","aliases":["EUVD-2019-18920","GHSA-49cc-qp2g-6gg3"],"status":"published","title":"Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.","description":"Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.","severity":{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01482,"percentile":0.74146,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-06-05T16:20:43Z","modified":"2026-06-17T02:43:56Z","products":[{"vendor":"citrix","product":"application_delivery_management"}],"references":[{"url":"https://support.citrix.com/v1/search?searchQuery=%22%22\u0026lang=en\u0026sort=cr_date_desc\u0026prod=\u0026pver=\u0026ct=Security+Bulletin","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX247738","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9548"},{"url":"https://github.com/advisories/GHSA-49cc-qp2g-6gg3"}],"sources":{"cve":[{"id":"CVE-2019-9548","description":"Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.","status":"published","published":"2019-06-05T16:20:43Z","modified":"2024-08-04T21:54:44.419Z","updated_at":"2026-11-02T14:20:20.397093Z"}],"euvd":[{"id":"EUVD-2019-18920","description":"Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.","status":"published","published":"2019-06-05T16:20:43Z","modified":"2024-08-04T21:54:44Z","updated_at":"2026-11-03T03:06:38.242317Z"}],"ghsa":[{"id":"GHSA-49cc-qp2g-6gg3","title":"Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.","description":"Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.","status":"published","published":"2022-05-24T16:47:27Z","modified":"2024-04-11T21:10:15Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:57:07.969203Z"}],"nvd":[{"id":"CVE-2019-9548","description":"Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.","status":"published","published":"2019-06-05T17:29:00.757Z","modified":"2026-06-17T02:43:56.003Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:05:16.285679Z"}]}}