Citrix Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Citrix Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (19)

• CVE-2022-27510 — CVSS 9.8 (critical): Unauthorized access to Gateway user capabilities
• CVE-2020-8247 — CVSS 8.8 (high): Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before…
• CVE-2022-27513 — CVSS 8.3 (high): Remote desktop takeover via phishing
• CVE-2021-22927 — CVSS 8.1 (high): A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow…
• CVE-2022-27508 — CVSS 7.5 (high): Unauthenticated denial of service
• CVE-2020-8246 — CVSS 7.5 (high): Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before…
• CVE-2021-22919 — CVSS 7.5 (high): A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler…
• CVE-2021-22956 — CVSS 7.5 (high): An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an…
• CVE-2021-22955 — CVSS 7.5 (high): A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN…
• CVE-2019-18177 — CVSS 6.5 (medium): In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN…
• CVE-2020-8299 — CVSS 6.5 (medium): Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix…
• CVE-2020-8300 — CVSS 6.5 (medium): Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from…
• CVE-2021-22920 — CVSS 6.5 (medium): A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler…
• CVE-2022-27507 — CVSS 6.5 (medium): Authenticated denial of service
• CVE-2023-24487 — CVSS 6.3 (medium): Arbitrary file read in Citrix ADC and Citrix Gateway
• CVE-2022-27509 — CVSS 6.1 (medium): Unauthenticated redirection to a malicious website
• CVE-2020-8245 — CVSS 6.1 (medium): Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15…
• CVE-2023-24488 — CVSS 6.1 (medium): Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting
• CVE-2022-27516 — CVSS 5.3 (medium): User login brute force protection functionality bypass