Overview 403 matches · 0 in Waratek scope · 0 protected · 50 exploited · 29 CISA KEV · 59 public PoC · 20 EPSS ≥ 0.5
403matches
0in Waratek scope0.0%
0protected0.0%
50exploited12.4%
29CISA KEV7.2%
59public PoC14.6%
20EPSS ≥ 0.55.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
2
0.5%
Not applicable
401
99.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
403
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 44 / year
20001
Not applicable1
High1
not blocked1
Working exploit published1
20014
Not applicable4
High2
Medium2
not blocked4
Working exploit published1
No public exploit3
20025
Not applicable5
High1
Medium4
not blocked5
Working exploit published2
No public exploit3
20031
Not applicable1
Medium1
not blocked1
Working exploit published1
20043
Not applicable3
High1
Medium1
Low1
not blocked3
No public exploit3
20055
Not applicable5
High2
Medium1
Low2
not blocked5
No public exploit5
20067
Not applicable7
High1
Medium6
not blocked7
Working exploit published1
No public exploit6
200715
Not applicable15
High5
Medium9
Low1
not blocked15
Working exploit published2
No public exploit13
200811
Not applicable11
High6
Medium4
Low1
not blocked11
Working exploit published2
Forecast only1
No public exploit8
200913
Not applicable13
High6
Medium6
Low1
not blocked13
Working exploit published4
No public exploit9
20106
Not applicable6
High2
Medium2
Low2
not blocked6
No public exploit6
201110
Not applicable10
High4
Medium5
Low1
not blocked10
Working exploit published2
No public exploit8
201211
Not applicable11
High4
Medium5
Low2
not blocked11
Working exploit published1
No public exploit10
201314
Not applicable14
High10
Medium3
Low1
not blocked14
No public exploit14
201430
Not applicable30
Critical2
High8
Medium19
Low1
not blocked30
Exploited2
Working exploit published2
No public exploit26
201514
Not applicable14
High4
Medium10
not blocked14
Working exploit published3
No public exploit11
201620
Not applicable20
Critical3
High8
Medium9
not blocked20
Exploited1
Working exploit published1
No public exploit18
201732
Outside Waratek scope2
Not applicable30
Critical5
High16
Medium11
not blocked32
Exploited1
No public exploit31
201833
Not applicable33
Critical11
High13
Medium8
Low1
not blocked33
Working exploit published2
No public exploit31
201923
Not applicable23
Critical13
High6
Medium4
not blocked23
Exploited10
Forecast only1
No public exploit12
202044
Not applicable44
Critical4
High27
Medium13
not blocked44
Exploited10
Proof of concept only1
No public exploit33
202115
Not applicable15
Critical2
High8
Medium5
not blocked15
Exploited1
No public exploit14
202217
Not applicable17
Critical4
High6
Medium6
Low1
not blocked17
Exploited2
No public exploit15
202317
Not applicable17
Critical4
High8
Medium5
not blocked17
Exploited7
No public exploit10
202423
Not applicable23
Critical1
High12
Medium10
not blocked23
Exploited6
No public exploit17
202512
Not applicable12
Critical3
High6
Medium3
not blocked12
Exploited3
No public exploit9
202617
Not applicable17
Critical5
High11
Medium1
not blocked17
Exploited7
Working exploit published1
No public exploit9
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-88779 | High | 2026-10-04 | Not applicable | Exploited | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28. |
| CVE-2026-88778 | High | 2026-09-27 | Not applicable | No public exploit | Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23. |
| CVE-2026-88777 | High | 2026-09-27 | Not applicable | No public exploit | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88776 | High | 2026-09-27 | Not applicable | No public exploit | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88775 | High | 2026-09-27 | Not applicable | No public exploit | Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88774 | High | 2026-09-27 | Not applicable | No public exploit | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage. |
| CVE-2026-88773 | Critical | 2026-09-27 | Not applicable | Working exploit published | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23. |
| CVE-2026-88772 | Critical | 2026-09-27 | Not applicable | Exploited | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service |
| CVE-2026-88771 | Critical | 2026-09-27 | Not applicable | Exploited | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands. |
| CVE-2026-19490 | Critical | 2026-08-19 | Not applicable | Exploited | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21. |
| CVE-2026-8655 | High | 2026-06-30 | Not applicable | No public exploit | Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment |
| CVE-2026-8452 | High | 2026-06-30 | Not applicable | Exploited | Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server |
| CVE-2026-8451 | High | 2026-06-30 | Not applicable | Exploited | Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP |
| CVE-2026-13474 | High | 2026-06-30 | Not applicable | No public exploit | Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler |
| CVE-2026-10817 | Medium | 2026-06-30 | Not applicable | No public exploit | Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler |
| CVE-2026-10816 | High | 2026-06-30 | Not applicable | No public exploit | Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled |
| CVE-2026-3055 | Critical | 2026-03-23 | Not applicable | Exploited | Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread |
| CVE-2025-7776 | High | 2025-08-26 | Not applicable | No public exploit | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it |
| CVE-2025-7775 | Critical | 2025-08-26 | Not applicable | Exploited | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX |
| CVE-2025-6759 | High | 2025-07-08 | Not applicable | No public exploit | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS |
| CVE-2025-6543 | Critical | 2025-06-25 | Not applicable | Exploited | Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server |
| CVE-2025-5777 | Critical | 2025-06-17 | Not applicable | Exploited | Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server |
| CVE-2025-5349 | High | 2025-06-17 | Not applicable | No public exploit | Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway |
| CVE-2025-4879 | High | 2025-06-17 | Not applicable | No public exploit | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows |
| CVE-2025-4365 | Medium | 2025-06-17 | Not applicable | No public exploit | Arbitrary file read in NetScaler Console and NetScaler SDX (SVM) |
| CVE-2025-0320 | High | 2025-06-17 | Not applicable | No public exploit | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows |
| CVE-2025-1223 | Medium | 2025-02-20 | Not applicable | No public exploit | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac |
| CVE-2025-1222 | Medium | 2025-02-20 | Not applicable | No public exploit | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac |
| CVE-2024-12284 | High | 2025-02-20 | Not applicable | No public exploit | Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows. |
| CVE-2024-8535 | Medium | 2024-11-12 | Not applicable | No public exploit | Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources |
| CVE-2024-8534 | High | 2024-11-12 | Not applicable | No public exploit | Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled |
| CVE-2024-8069 | Medium | 2024-11-12 | Not applicable | Exploited | Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server |
| CVE-2024-8068 | Medium | 2024-11-12 | Not applicable | Exploited | Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain |
| CVE-2024-7890 | Medium | 2024-09-11 | Not applicable | No public exploit | Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows |
| CVE-2024-7889 | High | 2024-09-11 | Not applicable | No public exploit | Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows |
| CVE-2024-42423 | High | 2024-09-10 | Not applicable | No public exploit | Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering. |
| CVE-2024-6677 | High | 2024-07-12 | Not applicable | No public exploit | Privilege escalation in uberAgent |
| CVE-2024-6286 | High | 2024-07-10 | Not applicable | No public exploit | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows |
| CVE-2024-6236 | High | 2024-07-10 | Not applicable | No public exploit | Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX |
| CVE-2024-6235 | Critical | 2024-07-10 | Not applicable | Exploited | Sensitive information disclosure in NetScaler Console |
| CVE-2024-6151 | High | 2024-07-10 | Not applicable | No public exploit | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS |
| CVE-2024-6150 | Medium | 2024-07-10 | Not applicable | No public exploit | A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning |
| CVE-2024-6149 | Medium | 2024-07-10 | Not applicable | No public exploit | Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5 |
| CVE-2024-6148 | Medium | 2024-07-10 | Not applicable | No public exploit | Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 |
| CVE-2024-5492 | Medium | 2024-07-10 | Not applicable | No public exploit | Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway |
| CVE-2024-5491 | High | 2024-07-10 | Not applicable | No public exploit | Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler |
| CVE-2024-5661 | Medium | 2024-06-13 | Not applicable | No public exploit | An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive. |
| CVE-2024-3661 | High | 2024-05-06 | Not applicable | No public exploit | DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. |
| CVE-2024-2049 | Medium | 2024-03-12 | Not applicable | No public exploit | Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP. |
| CVE-2023-6184 | High | 2024-01-18 | Not applicable | Exploited | Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting |
| CVE-2023-6549 | High | 2024-01-17 | Not applicable | Exploited | Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read |
| CVE-2023-6548 | High | 2024-01-17 | Not applicable | Exploited | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface. |
| CVE-2023-4967 | High | 2023-10-27 | Not applicable | Exploited | Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server |
| CVE-2023-4966 | Critical | 2023-10-10 | Not applicable | Exploited | Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. |
| CVE-2023-3519 | Critical | 2023-07-19 | Not applicable | Exploited | Unauthenticated remote code execution |
| CVE-2023-3467 | High | 2023-07-19 | Not applicable | Exploited | Privilege Escalation to root administrator (nsroot) |
| CVE-2023-3466 | High | 2023-07-19 | Not applicable | Exploited | Reflected Cross-Site Scripting (XSS) |
| CVE-2023-24492 | Critical | 2023-07-11 | Not applicable | No public exploit | A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts. |
| CVE-2023-24491 | High | 2023-07-11 | Not applicable | No public exploit | A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM. |
| CVE-2023-24490 | Medium | 2023-07-10 | Not applicable | No public exploit | Users with only access to launch VDA applications can launch an unauthorized desktop |
| CVE-2023-24489 | Critical | 2023-07-10 | Not applicable | Exploited | A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. |
| CVE-2023-24488 | Medium | 2023-07-10 | Not applicable | Exploited | Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting |
| CVE-2023-24487 | High | 2023-07-10 | Not applicable | No public exploit | Arbitrary file read in Citrix ADC and Citrix Gateway |
| CVE-2023-24486 | Medium | 2023-07-10 | Not applicable | No public exploit | A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched. |
| CVE-2023-24485 | High | 2023-02-16 | Not applicable | No public exploit | Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app. |
| CVE-2023-24484 | Medium | 2023-02-16 | Not applicable | No public exploit | A malicious user can cause log files to be written to a directory that they do not have permission to write to. |
| CVE-2023-24483 | High | 2023-02-16 | Not applicable | No public exploit | A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA. |
| CVE-2022-27508 | High | 2023-01-26 | Not applicable | No public exploit | Unauthenticated denial of service |
| CVE-2022-27507 | Medium | 2023-01-26 | Not applicable | No public exploit | Authenticated denial of service |
| CVE-2019-18177 | Medium | 2022-12-26 | Not applicable | No public exploit | In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update. |
| CVE-2022-27518 | Critical | 2022-12-13 | Not applicable | Exploited | Unauthenticated remote arbitrary code execution |
| CVE-2022-27516 | Critical | 2022-11-08 | Not applicable | No public exploit | User login brute force protection functionality bypass |
| CVE-2022-27513 | Critical | 2022-11-08 | Not applicable | No public exploit | Remote desktop takeover via phishing |
| CVE-2022-27510 | Critical | 2022-11-08 | Not applicable | Exploited | Unauthorized access to Gateway user capabilities |
| CVE-2022-27509 | Medium | 2022-07-28 | Not applicable | No public exploit | Unauthenticated redirection to a malicious website |
| CVE-2022-27512 | Medium | 2022-06-16 | Not applicable | No public exploit | Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM. |
| CVE-2022-27511 | High | 2022-06-16 | Not applicable | No public exploit | Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted. |
| CVE-2022-21827 | High | 2022-05-26 | Not applicable | No public exploit | An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM. |
| CVE-2021-44519 | High | 2022-04-19 | Not applicable | No public exploit | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution. |
| CVE-2022-27506 | Low | 2022-04-13 | Not applicable | No public exploit | Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI |
| CVE-2022-27505 | Medium | 2022-04-13 | Not applicable | No public exploit | Reflected cross site scripting (XSS) |
| CVE-2022-27503 | Medium | 2022-04-13 | Not applicable | No public exploit | Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9 |
| CVE-2022-26151 | High | 2022-04-13 | Not applicable | No public exploit | Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection. |
| CVE-2021-44520 | High | 2022-04-13 | Not applicable | No public exploit | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges. |
| CVE-2022-26355 | Medium | 2022-03-10 | Not applicable | No public exploit | Citrix Federated Authentication Service (FAS) 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module (TPM) to incorrectly store that key in the Microsoft Software Key Storage Provider (MSKSP). This issue only occurs if PowerShell was used when configuring FAS to store the registration authority certificate’s private key in the TPM. It does not occur if the TPM was not selected for use or if the FAS administration console was used for configuration. |
| CVE-2022-21825 | High | 2022-02-09 | Not applicable | No public exploit | An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation. |
| CVE-2021-22956 | High | 2021-12-07 | Not applicable | No public exploit | An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication. |
| CVE-2021-22955 | High | 2021-12-07 | Not applicable | No public exploit | A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication. |
| CVE-2021-22941 | Critical | 2021-09-23 | Not applicable | Exploited | Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller. |
| CVE-2021-22932 | High | 2021-08-16 | Not applicable | No public exploit | An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable Encryption” in the ShareFile configuration page and did not re-select this setting after running the CTX269106 mitigation tool. ShareFile customers who have not run the CTX269106 mitigation tool or who re-selected “Enable Encryption” immediately after running the tool are unaffected by this issue. |
| CVE-2021-22928 | High | 2021-08-05 | Not applicable | No public exploit | A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM. |
| CVE-2021-22927 | High | 2021-08-05 | Not applicable | No public exploit | A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session. |
| CVE-2021-22920 | Medium | 2021-08-05 | Not applicable | No public exploit | A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a SAML authentication hijack to steal a valid user session. |
| CVE-2021-22919 | High | 2021-08-05 | Not applicable | No public exploit | A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed. |
| CVE-2021-22914 | High | 2021-06-16 | Not applicable | No public exploit | Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue affects all versions of Citrix Cloud Connector that were installed by passing secure client parameters for installation via the command line. The issue does not affect Citrix Cloud Connector if it was installed using the interactive installer or where a parameter file was used with the command-line installer. |
| CVE-2020-8300 | Medium | 2021-06-16 | Not applicable | No public exploit | Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible. |
| CVE-2020-8299 | Medium | 2021-06-16 | Not applicable | No public exploit | Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-of-service from within the same Layer 2 network segment. Note that the attacker must be in the same Layer 2 network segment as the vulnerable appliance. |
| CVE-2021-22907 | High | 2021-05-27 | Not applicable | No public exploit | An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4. |
| CVE-2021-22891 | Critical | 2021-05-27 | Not applicable | No public exploit | A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller. |
| CVE-2020-8275 | Medium | 2021-01-06 | Not applicable | No public exploit | Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device. |