{"id":"CVE-2023-3519","aliases":["EUVD-2023-44176","GHSA-m4j4-rmj5-w5gp"],"status":"published","title":"Unauthenticated remote code execution","description":"Unauthenticated remote code execution","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.99749,"percentile":0.99954,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-94"],"published":"2023-07-19T17:51:39Z","modified":"2026-08-05T05:16:39Z","kev":{"date_added":"2023-07-19","due_date":"2023-08-09","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2023-07-19"},{"source":"kev","since":"2023-07-19"}],"exploits":[{"source":"metasploit","id":"exploit/freebsd/http/citrix_formssso_target_rce","title":"Citrix ADC (NetScaler) Forms SSO Target RCE","type":"exploit","platform":"Unix","date":"2023-07-18","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/freebsd/http/citrix_formssso_target_rce"},{"source":"pocgithub","id":"securekomodo/citrixInspector","title":"securekomodo/citrixInspector","date":"2023-07-20","url":"https://github.com/securekomodo/citrixInspector"},{"source":"pocgithub","id":"telekom-security/cve-2023-3519-citrix-scanner","title":"telekom-security/cve-2023-3519-citrix-scanner","date":"2023-07-20","url":"https://github.com/telekom-security/cve-2023-3519-citrix-scanner"},{"source":"pocgithub","id":"BishopFox/CVE-2023-3519","title":"BishopFox/CVE-2023-3519","date":"2023-07-21","url":"https://github.com/BishopFox/CVE-2023-3519"},{"source":"pocgithub","id":"KR0N-SECURITY/CVE-2023-3519","title":"KR0N-SECURITY/CVE-2023-3519","date":"2023-07-21","url":"https://github.com/KR0N-SECURITY/CVE-2023-3519"},{"source":"pocgithub","id":"SalehLardhi/CVE-2023-3519","title":"SalehLardhi/CVE-2023-3519","date":"2023-07-21","url":"https://github.com/SalehLardhi/CVE-2023-3519"},{"source":"pocgithub","id":"d0rb/CVE-2023-3519","title":"d0rb/CVE-2023-3519","date":"2023-07-21","url":"https://github.com/d0rb/CVE-2023-3519"},{"source":"pocgithub","id":"mr-r3b00t/CVE-2023-3519","title":"mr-r3b00t/CVE-2023-3519","date":"2023-07-21","url":"https://github.com/mr-r3b00t/CVE-2023-3519"},{"source":"pocgithub","id":"passwa11/CVE-2023-3519","title":"passwa11/CVE-2023-3519","date":"2023-08-05","url":"https://github.com/passwa11/CVE-2023-3519"},{"source":"pocgithub","id":"rwincey/cve-2023-3519","title":"rwincey/cve-2023-3519","date":"2023-08-06","url":"https://github.com/rwincey/cve-2023-3519"},{"source":"pocgithub","id":"mandiant/citrix-ioc-scanner-cve-2023-3519","title":"mandiant/citrix-ioc-scanner-cve-2023-3519","date":"2023-08-10","url":"https://github.com/mandiant/citrix-ioc-scanner-cve-2023-3519"},{"source":"pocgithub","id":"Chocapikk/CVE-2023-3519","title":"Chocapikk/CVE-2023-3519","date":"2023-08-24","url":"https://github.com/Chocapikk/CVE-2023-3519"},{"source":"pocgithub","id":"JonaNeidhart/CVE-2023-3519-BackdoorCheck","title":"JonaNeidhart/CVE-2023-3519-BackdoorCheck","date":"2023-08-31","url":"https://github.com/JonaNeidhart/CVE-2023-3519-BackdoorCheck"},{"source":"pocgithub","id":"dhammerg/CVE-2023-3519","title":"dhammerg/CVE-2023-3519","date":"2023-10-27","url":"https://github.com/dhammerg/CVE-2023-3519"},{"source":"nuclei","id":"CVE-2023-3519","title":"Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3519.yaml"}],"products":[{"vendor":"citrix","product":"netscaler adc"},{"vendor":"citrix","product":"netscaler adc and netscaler gateway"},{"vendor":"citrix","product":"netscaler gateway"},{"vendor":"citrix","product":"netscaler_application_delivery_controller"},{"vendor":"citrix","product":"netscaler_gateway"},{"vendor":"cloud software group","product":"netscaler gateway"}],"references":[{"url":"https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467","tags":["x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-3519","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3519"},{"url":"https://github.com/advisories/GHSA-m4j4-rmj5-w5gp"}],"sources":{"cve":[{"id":"CVE-2023-3519","description":"Unauthenticated remote code execution","status":"published","published":"2023-07-19T17:51:39.739Z","modified":"2026-08-05T03:55:52.67Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:35:24.707957Z"}],"euvd":[{"id":"EUVD-2023-44176","description":"Unauthenticated remote code execution","status":"published","published":"2023-07-19T17:51:39Z","modified":"2026-08-05T03:55:52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2023-07-19","updated_at":"2026-11-02T18:02:22.516769Z"}],"ghsa":[{"id":"GHSA-m4j4-rmj5-w5gp","title":"Unauthenticated remote code execution","description":"Unauthenticated remote code execution","status":"published","published":"2023-07-19T18:30:56Z","modified":"2025-10-22T00:33:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:04:08.734574Z"}],"kev":[{"id":"CVE-2023-3519","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","description":"Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.","cwes":["CWE-94"],"kev":{"date_added":"2023-07-19","due_date":"2023-08-09","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2023-3519","description":"Unauthenticated remote code execution","status":"published","published":"2023-07-19T18:15:11.513Z","modified":"2026-08-05T05:16:39.13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:08:17.044696Z"}]}}