Citrix Sd-wan vulnerabilities

• citrix sd-wan standard/premium editions, sd wan premium edition, sd wan standard edition +12 more +14 more Server-Side Request Forgery (SSRF) CVE-2024-2049 6.5 MediumMarch 12, 2024
• citirx citrix sd-wan, citrix sd-wan 1000 firmware, sd-wan 1100 firmware +10 more +12 more Reflected cross site scripting (XSS) CVE-2022-27505 6.1 MediumApril 13, 2022
• citirx citrix sd-wan, citrix sd-wan 1000 firmware, sd-wan 1100 firmware +12 more +14 more Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI CVE-2022-27506 2.7 LowApril 13, 2022
• citrix application delivery controller firmware, gateway, sd-wan +2 more An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22... CVE-2021-22956 7.5 HighDecember 7, 2021
• citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 more A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix... CVE-2021-22919 7.5 HighAugust 5, 2021
• citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 more Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix... CVE-2020-8299 6.5 MediumJune 16, 2021
• citrix sd-wan Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11... CVE-2020-8273 8.8 HighNovember 16, 2020
• citrix sd-wan Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center... CVE-2020-8272 7.5 HighNovember 16, 2020
• citrix sd-wan Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions... CVE-2020-8271 EPSS 11.1% 9.8 CriticalNovember 16, 2020
• citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 more Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1... CVE-2020-8247 8.8 HighSeptember 18, 2020
• citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 more Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1... CVE-2020-8246 7.5 HighSeptember 18, 2020
• citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +2 more +4 more Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... CVE-2020-8196 In KEV EPSS 26.3% 4.3 MediumJuly 10, 2020
• citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +3 more +5 more Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18... CVE-2020-8195 In KEV EPSS 33.0% 6.5 MediumJuly 10, 2020
• citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +1 more +3 more Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18... CVE-2020-8198 6.1 MediumJuly 10, 2020
• citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +1 more +3 more Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... CVE-2020-8194 EPSS 10.8% 6.5 MediumJuly 10, 2020
• citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +2 more +4 more Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... CVE-2020-8193 In KEVPublic exploit EPSS 88.3% 6.5 MediumJuly 10, 2020
• citrix application delivery controller firmware, gateway firmware, netscaler gateway firmware +1 more +3 more Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18... CVE-2020-8191 EPSS 23.5% 6.1 MediumJuly 10, 2020
• citrix sd-wan center, netscaler sd-wan center +1 more Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation. CVE-2020-6175 5.9 MediumMarch 16, 2020
• citrix sd-wan center, netscaler sd-wan center +1 more Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow... CVE-2019-11345 6.1 MediumMarch 10, 2020
• intel ipmi, citrix netscaler firmware, netscaler sd-wan firmware +3 more +5 more Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for... CVE-2013-3620 7.5 HighJanuary 2, 2020
• intel ipmi, citrix netscaler firmware, netscaler sd-wan firmware +3 more +5 more Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation... CVE-2013-3619 8.1 HighJanuary 2, 2020
• citrix application delivery controller (adc), gateway, and sd-wan wanop appliance, application delivery controller firmware, gateway firmware +1 more +3 more An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1,... CVE-2019-19781 In KEVPublic exploit EPSS 100.0% 9.8 CriticalDecember 27, 2019
• citrix netscaler sd-wan, sd-wan +1 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input... CVE-2019-12985 EPSS 39.5% 9.8 CriticalJuly 16, 2019
• citrix netscaler sd-wan, sd-wan +1 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input... CVE-2019-12986 EPSS 39.5% 9.8 CriticalJuly 16, 2019
• citrix netscaler sd-wan, sd-wan +1 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input... CVE-2019-12987 EPSS 42.6% 9.8 CriticalJuly 16, 2019
• citrix netscaler sd-wan, sd-wan +1 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input... CVE-2019-12988 EPSS 42.6% 9.8 CriticalJuly 16, 2019
• citrix netscaler sd-wan, sd-wan, sd-wan and netscaler +2 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. CVE-2019-12989 In KEVPublic exploit EPSS 95.0% 9.8 CriticalJuly 16, 2019
• citrix netscaler sd-wan, sd-wan +1 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory... CVE-2019-12990 EPSS 39.3% 9.8 CriticalJuly 16, 2019
• citrix netscaler sd-wan, sd-wan, sd-wan and netscaler +2 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input... CVE-2019-12991 In KEVPublic exploit EPSS 74.1% 8.8 HighJuly 16, 2019
• citrix netscaler sd-wan, sd-wan +1 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input... CVE-2019-12992 EPSS 48.3% 8.8 HighJuly 16, 2019
• citrix sd-wan center, netscaler sd-wan center +1 more Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow... CVE-2019-10883 EPSS 65.5% 9.8 CriticalJune 3, 2019
• citrix netscaler sd-wan, sd-wan +1 more Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper... CVE-2019-11550 5.9 MediumMay 8, 2019
• citrix netscaler sd-wan, sd-wan +1 more An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3... CVE-2018-17448 9.8 CriticalOctober 23, 2018
• citrix netscaler sd-wan, sd-wan +1 more An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and... CVE-2018-17447 7.5 HighOctober 23, 2018
• citrix netscaler sd-wan, sd-wan +1 more A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9... CVE-2018-17446 9.8 CriticalOctober 23, 2018
• citrix netscaler sd-wan, sd-wan +1 more A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x... CVE-2018-17445 EPSS 11.1% 9.8 CriticalOctober 23, 2018
• citrix netscaler sd-wan, sd-wan +1 more A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x... CVE-2018-17444 7.5 HighOctober 23, 2018
• citrix netscaler gateway, netscaler sd-wan, netscaler application delivery controller +2 more Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build... CVE-2018-5314 7.5 HighMarch 1, 2018
• citrix netscaler sd-wan, netscaler sd-wan enterprise, cloudbridge virtual wan, and xenmobile server +1 more Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute... CVE-2017-6316 In KEVPublic exploit EPSS 73.0% 9.8 CriticalJuly 20, 2017