Netscaler Gateway Firmware vulnerabilities | LiveThreat CVE Feed

Product

Netscaler Gateway Firmware

by Citrix · last CVE Jul 10, 2020

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities31 In the news0 Timeline

Severity mix

Critical 4High 8Medium 11Low 0

Severity

All severities31 Critical4 High8 Medium11 Low0

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Netscaler Gateway Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-8195 In wildKEV	6.5	33%	Jul 10	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8193 In wildKEV	6.5	88%	Jul 10	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8196 In wildKEV	4.3	26%	Jul 10	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8194	6.5	11%	Jul 10	Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before… Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8198	6.1	1%	Jul 10	Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before… Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2020-8191	6.1	23%	Jul 10	Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before… Affected: 10.5 before 10.5-70.18; 11.1 before 11.1-64.14; 12.0 before 12.0-63.21; 12.1 before 12.1-57.18
CVE-2018-6811	6.1	1%	Mar 6	Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to… Affected: 10.5; 11.0; 11.1; 12.0
CVE-2019-6485	5.9	2%	Feb 22	Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery… Affected: 10.5; 11.0; 11.1; 12.0; 12.1
CVE-2017-17549	5.9	2%	Dec 13	Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22… Affected: 10.5; 11.0; 11.1; 12.0
CVE-2017-17382	5.9	14%	Dec 13	Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22… Affected: 10.5; 11.0; 11.1; 12.0
CVE-2018-18517	4.8	1%	Oct 24	Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS Affected: 10.5.0 before 10.5.69.003; 11.1.0 before 11.1.59.004; 12.0.0 before 12.0.58.7; 12.1.0 before 12.1.49.1