Netscaler Gateway Firmware vulnerabilities | LiveThreat CVE Feed

Product

Netscaler Gateway Firmware

by Citrix · last CVE Jul 10, 2020

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities31 In the news0 Timeline

Severity mix

Critical 4High 8Medium 11Low 0

Severity

All severities31 Critical4 High8 Medium11 Low0

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Netscaler Gateway Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-19781 RansomwareIn wildKEV	9.8	100%	Dec 27	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Affected: 10.5; 11.1; 12.0; 12.1
CVE-2020-8195 In wildKEV	6.5	33%	Jul 10	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8193 In wildKEV	6.5	88%	Jul 10	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8196 In wildKEV	4.3	26%	Jul 10	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2019-18225	9.8	2%	Oct 21	An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build… Affected: 10.5; 11.1; 12.0; 12.1
CVE-2018-7218	9.8	6%	May 17	The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13,… Affected: 10.5; 11.0; 11.1; 12.0
CVE-2018-6809	9.8	4%	Mar 6	NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system Affected: 10.5; 11.0; 11.1; 12.0
CVE-2020-8197	8.8	2%	Jul 10	Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with… Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2017-7219	8.8	5%	Apr 13	A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows a remote… Affected: 10.1; 10.5; 11.0; 11.1
CVE-2020-8190	7.5	1%	Jul 10	Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8187	7.5	2%	Jul 10	Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack Affected: 11.1 before 11.1-63.9; 12.0 before 12.0-62.10
CVE-2019-12044	7.5	2%	May 22	A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x before 12.1.49.23 and Citrix… Affected: 10.5.0 before 10.5.70; 11.1.0 before 11.1.59.10; 12.0.0 before 12.0.59.8; 12.1.0 before 12.1.49.23
CVE-2018-6810	7.5	4%	Mar 6	Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory… Affected: 10.5; 11.0; 11.1; 12.0
CVE-2018-6808	7.5	2%	Mar 6	NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system Affected: 10.5; 11.0; 11.1; 12.0
CVE-2017-14602	7.2	2%	Sep 26	A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5… Affected: 10.1; 10.5; 10.5e; 11.0; 11.1; 12.0
CVE-2020-8194	6.5	11%	Jul 10	Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before… Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8198	6.1	1%	Jul 10	Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before… Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8191	6.1	23%	Jul 10	Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before… Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2018-6811	6.1	1%	Mar 6	Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to… Affected: 10.5; 11.0; 11.1; 12.0
CVE-2019-6485	5.9	2%	Feb 22	Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery… Affected: 10.5; 11.0; 11.1; 12.0; 12.1
CVE-2017-17549	5.9	2%	Dec 13	Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22… Affected: 10.5; 11.0; 11.1; 12.0
CVE-2017-17382	5.9	14%	Dec 13	Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22… Affected: 10.5; 11.0; 11.1; 12.0
CVE-2018-18517	4.8	1%	Oct 24	Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS Affected: 10.5.0 before 10.5.69.003; 11.1.0 before 11.1.59.004; 12.0.0 before 12.0.58.7; 12.1.0 before 12.1.49.1
CVE-2015-7998	–	1%	Nov 17	The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build… Affected: 10.1; 10.5
CVE-2015-7997	–	1%	Nov 17	Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5… Affected: 10.1; 10.5
CVE-2015-7996	–	1%	Nov 17	The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e… Affected: 10.1; 10.5
CVE-2015-6672	–	1%	Sep 17	Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build… Affected: 10.1; 10.5; 10.5e
CVE-2015-5538	–	3%	Sep 17	Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e… Affected: 10.1; 10.5; 10.5e
CVE-2015-5080	–	4%	Jul 16	The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build… Affected: 10.1.120.1316.e; 10.1.121; 10.1.122; 10.1.123; 10.1.124; 10.1.125; +8 more
CVE-2015-2829	–	2%	May 12	Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a… Affected: 10.5; 10.5e
CVE-2014-8580	–	2%	Nov 7	Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e,… Affected: 10.1.120.1316.e; 10.1.121; 10.1.122; 10.1.123; 10.1.124; 10.1.125; +6 more