Netscaler Sd-wan vulnerabilities | LiveThreat CVE Feed

Product

Netscaler Sd-wan

by Citrix · last CVE Jul 16, 2019

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities16 In the news0 Timeline

Severity mix

Critical 10High 5Medium 1Low 0

Severity

All severities16 Critical10 High5 Medium1 Low0

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add Netscaler Sd-wan to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-12989 In wildKEV	9.8	95%	Jul 16	Citrix SD-WAN and NetScaler SQL Injection Vulnerability Affected: 10.0.0 before 10.0.8
CVE-2017-6316 In wildKEV	9.8	73%	Jul 20	Citrix Multiple Products Remote Code Execution Vulnerability Affected: through 9.1.2.26.561201
CVE-2019-12990	9.8	39%	Jul 16	Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal Affected: 10.0 before 10.0.8
CVE-2019-12988	9.8	43%	Jul 16	Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6) Affected: 10.0 before 10.0.8
CVE-2019-12987	9.8	43%	Jul 16	Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6) Affected: 10.0 before 10.0.8
CVE-2019-12986	9.8	40%	Jul 16	Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6) Affected: 10.0 before 10.0.8
CVE-2019-12985	9.8	40%	Jul 16	Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6) Affected: 10.0 before 10.0.8
CVE-2018-17448	9.8	2%	Oct 23	An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4 Affected: 9.3.0 through 9.3.6; 10.0.0 through 10.0.4
CVE-2018-17446	9.8	2%	Oct 23	A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4 Affected: 9.3.0 through 9.3.6; 10.0.0 through 10.0.4
CVE-2018-17445	9.8	11%	Oct 23	A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4 Affected: 9.3.0 through 9.3.6; 10.0.0 through 10.0.4