cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2024-2049,https://securityvulnerability.io/vulnerability/CVE-2024-2049,Citrix SD-WAN Vulnerability Allows Limited Information Disclosure,Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.,Citrix,Citrix Sd-wan Standard/premium Editions,6.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-03-12T12:39:45.077Z,0 CVE-2021-22919,https://securityvulnerability.io/vulnerability/CVE-2021-22919,,"A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed.",Citrix,"Citrix Adc, Citrix Gateway, Citrix Sd-wan Wanop",7.5,HIGH,0.0010300000431016088,false,false,false,false,,false,false,2021-08-05T20:16:46.000Z,0 CVE-2020-8299,https://securityvulnerability.io/vulnerability/CVE-2020-8299,,"Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-of-service from within the same Layer 2 network segment. Note that the attacker must be in the same Layer 2 network segment as the vulnerable appliance.",Citrix,"Citrix Adc, Citrix Gateway, Citrix Sd-wan Wanop Edition",6.5,MEDIUM,0.0005799999926239252,false,false,false,false,,false,false,2021-06-16T13:08:22.000Z,0 CVE-2020-8273,https://securityvulnerability.io/vulnerability/CVE-2020-8273,,"Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.",Citrix,Citrix Sd-wan Center,8.8,HIGH,0.0015999999595806003,false,false,false,false,,false,false,2020-11-16T00:33:33.000Z,0 CVE-2020-8272,https://securityvulnerability.io/vulnerability/CVE-2020-8272,,"Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8",Citrix,Citrix Sd-wan Center,7.5,HIGH,0.0008200000156648457,false,false,false,false,,false,false,2020-11-16T00:33:14.000Z,0 CVE-2020-8271,https://securityvulnerability.io/vulnerability/CVE-2020-8271,,"Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8",Citrix,Citrix Sd-wan Center,9.8,CRITICAL,0.00800000037997961,false,false,false,false,,false,false,2020-11-16T00:32:58.000Z,0 CVE-2020-6175,https://securityvulnerability.io/vulnerability/CVE-2020-6175,,Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation.,Citrix,"Citrix Sd-wan Center,Netscaler Sd-wan Center",5.9,MEDIUM,0.0012000000569969416,false,false,false,false,,false,false,2020-03-16T20:42:27.000Z,0 CVE-2019-11345,https://securityvulnerability.io/vulnerability/CVE-2019-11345,,Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS.,Citrix,"Netscaler Sd-wan Center,Citrix Sd-wan Center",6.1,MEDIUM,0.0007800000021234155,false,false,false,false,,false,false,2020-03-10T13:03:02.000Z,0 CVE-2019-12985,https://securityvulnerability.io/vulnerability/CVE-2019-12985,,Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6).,Citrix,"Sd-wan,Netscaler Sd-wan",9.8,CRITICAL,0.9379199743270874,false,false,false,false,,false,false,2019-07-16T17:53:12.000Z,0 CVE-2019-12986,https://securityvulnerability.io/vulnerability/CVE-2019-12986,,Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6).,Citrix,"Sd-wan,Netscaler Sd-wan",9.8,CRITICAL,0.9379199743270874,false,false,false,false,,false,false,2019-07-16T17:47:04.000Z,0 CVE-2019-12987,https://securityvulnerability.io/vulnerability/CVE-2019-12987,,Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).,Citrix,"Sd-wan,Netscaler Sd-wan",9.8,CRITICAL,0.9379199743270874,false,false,false,false,,false,false,2019-07-16T17:42:46.000Z,0 CVE-2019-12988,https://securityvulnerability.io/vulnerability/CVE-2019-12988,,Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).,Citrix,"Sd-wan,Netscaler Sd-wan",9.8,CRITICAL,0.9379199743270874,false,false,false,false,,false,false,2019-07-16T17:39:56.000Z,0 CVE-2019-12989,https://securityvulnerability.io/vulnerability/CVE-2019-12989,,Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.,Citrix,"Netscaler Sd-wan,Sd-wan",9.8,CRITICAL,0.054340001195669174,true,false,false,true,,false,false,2019-07-16T17:32:44.000Z,0 CVE-2019-12990,https://securityvulnerability.io/vulnerability/CVE-2019-12990,,Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.,Citrix,"Sd-wan,Netscaler Sd-wan",9.8,CRITICAL,0.7049199938774109,false,false,false,false,,false,false,2019-07-16T17:29:01.000Z,0 CVE-2019-12991,https://securityvulnerability.io/vulnerability/CVE-2019-12991,,Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).,Citrix,"Sd-wan,Netscaler Sd-wan",8.8,HIGH,0.2649500072002411,true,false,false,true,,false,false,2019-07-16T17:16:38.000Z,0 CVE-2019-12992,https://securityvulnerability.io/vulnerability/CVE-2019-12992,,Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).,Citrix,"Sd-wan,Netscaler Sd-wan",8.8,HIGH,0.18106000125408173,false,false,false,false,,false,false,2019-07-16T17:12:31.000Z,0 CVE-2019-10883,https://securityvulnerability.io/vulnerability/CVE-2019-10883,,Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.,Citrix,"Netscaler Sd-wan Center,Citrix Sd-wan Center",9.8,CRITICAL,0.5710399746894836,false,false,false,false,,false,false,2019-06-03T20:37:36.000Z,0 CVE-2019-11550,https://securityvulnerability.io/vulnerability/CVE-2019-11550,,Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.,Citrix,"Sd-wan,Netscaler Sd-wan",5.9,MEDIUM,0.0012000000569969416,false,false,false,false,,false,false,2019-05-08T16:09:32.000Z,0 CVE-2018-17447,https://securityvulnerability.io/vulnerability/CVE-2018-17447,,An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.,Citrix,Netscaler Sd-wan,7.5,HIGH,0.0008099999977275729,false,false,false,false,,false,false,2018-10-23T21:00:00.000Z,0 CVE-2018-17445,https://securityvulnerability.io/vulnerability/CVE-2018-17445,,A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.,Citrix,Netscaler Sd-wan,9.8,CRITICAL,0.0010400000028312206,false,false,false,false,,false,false,2018-10-23T21:00:00.000Z,0 CVE-2018-17444,https://securityvulnerability.io/vulnerability/CVE-2018-17444,,A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.,Citrix,Netscaler Sd-wan,7.5,HIGH,0.00139999995008111,false,false,false,false,,false,false,2018-10-23T21:00:00.000Z,0 CVE-2018-17448,https://securityvulnerability.io/vulnerability/CVE-2018-17448,,An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.,Citrix,Netscaler Sd-wan,9.8,CRITICAL,0.0013500000350177288,false,false,false,false,,false,false,2018-10-23T21:00:00.000Z,0 CVE-2018-17446,https://securityvulnerability.io/vulnerability/CVE-2018-17446,,A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.,Citrix,Netscaler Sd-wan,9.8,CRITICAL,0.0013000000035390258,false,false,false,false,,false,false,2018-10-23T21:00:00.000Z,0 CVE-2018-5314,https://securityvulnerability.io/vulnerability/CVE-2018-5314,,"Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.",Citrix,"Netscaler Sd-wan,Netscaler Gateway,Netscaler Application Delivery Controller",7.5,HIGH,0.001120000029914081,false,false,false,false,,false,false,2018-03-01T17:00:00.000Z,0 CVE-2017-6316,https://securityvulnerability.io/vulnerability/CVE-2017-6316,,"Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.",Citrix,Netscaler Sd-wan,9.8,CRITICAL,0.9579499959945679,true,false,false,true,,false,false,2017-07-20T04:00:00.000Z,0