NetScaler ADC vulnerabilities | LiveThreat CVE Feed

Network Security

NetScaler ADC

by Citrix · last CVE Oct 4, 2026

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities69 In the news12 Timeline

Severity mix

Critical 17High 28Medium 12Low 0

Severity

All severities69 Critical17 High28 Medium12 Low0

Exploitation

On CISA KEV13 Exploited in the wild13

Watch

Add NetScaler ADC to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-27507	6.5	1%	Jan 26	Authenticated denial of service Affected: 12.1 before 12.1-64.17; 13.0 before 13.0-85.19; 13.1 before 13.1-21.50
CVE-2019-18177	6.5	1%	Dec 26	In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint Affected: before 13.0-58.30
CVE-2021-22920	6.5	1%	Aug 5	A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition… Affected: 12.1-62.25; 13.0-82.42
CVE-2020-8300	6.5	3%	Jun 16	Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML… Affected: 11.1 before 11.1-65.20
CVE-2020-8299	6.5	0%	Jun 16	Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0,… Affected: 11.1 before 11.1-65.20
CVE-2024-5492	6.1	1%	Jul 10	Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway Affected: 12.1 before 12.1-55.304; 12.1 before 12.1-55.304; 12.1 before 13.0-92.31; 13.1 before 13.1-37.183; 13.1 before 13.1-53.17; 14.1 before 14.1-25.53
CVE-2023-3466	6.1	3%	Jul 19	Reflected Cross-Site Scripting (XSS) Affected: 12.1 before 12.1-55.297; 12.1 before 12.1-55.297; 13.0 before 13.0-91.13; 13.1 before 13.1-37.159; 13.1 before 13.1-49.13; 11.1-65.22
CVE-2023-24488	6.1	81%	Jul 10	Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting Affected: 12.1 before 12.1-65.35; 13.0 before 13.0-90.11; 13.1 before 13.1-45.61
CVE-2022-27509	6.1	1%	Jul 28	Unauthenticated redirection to a malicious website Affected: 12.1 before 12.1-65.15; 13.0 before 13.0-86.17; 13.1 before 13.1-24.38
CVE-2020-8245	6.1	1%	Sep 18	Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before… Affected: 12.1 before 12.1-58.15
CVE-2016-2072	6.1	1%	Feb 17	The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e… Affected: 10.1; 10.5; 10.5e; 11.0; 10.1; 10.5; +2 more
CVE-2015-3642	5.9	1%	Aug 2	The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0… Affected: All versions, or not specified