Citrix Netscaler Application Delivery Controller Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Citrix Netscaler Application Delivery Controller Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (29)

• CVE-2015-5538 — CVSS 10.0 (critical): Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build…
• CVE-2014-2881 — CVSS 10.0 (critical): Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler…
• CVE-2013-6941 — CVSS 10.0 (critical): Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1…
• CVE-2014-2882 — CVSS 10.0 (critical): Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before…
• CVE-2018-6809 — CVSS 9.8 (critical): NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a…
• CVE-2015-5080 — CVSS 9.0 (critical): The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5…
• CVE-2016-9028 — CVSS 8.8 (high): Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote…
• CVE-2013-6011 — CVSS 7.8 (high): Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service…
• CVE-2015-2829 — CVSS 7.8 (high): Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e…
• CVE-2018-6808 — CVSS 7.5 (high): NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary…
• CVE-2018-6810 — CVSS 7.5 (high): Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows…
• CVE-2014-7140 — CVSS 7.5 (high): Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x…
• CVE-2019-12044 — CVSS 7.5 (high): A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x…
• CVE-2013-6942 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0…
• CVE-2018-6811 — CVSS 6.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0…
• CVE-2017-5933 — CVSS 5.9 (medium): Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly…
• CVE-2019-6485 — CVSS 5.9 (medium): Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before…
• CVE-2013-6938 — CVSS 5.0 (medium): Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery…
• CVE-2013-6943 — CVSS 5.0 (medium): Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows…
• CVE-2013-6940 — CVSS 5.0 (medium): Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user…
• CVE-2014-4347 — CVSS 5.0 (medium): Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4…
• CVE-2015-7996 — CVSS 5.0 (medium): The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build…
• CVE-2015-7998 — CVSS 5.0 (medium): The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before…
• CVE-2013-6939 — CVSS 5.0 (medium): Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1…
• CVE-2014-8580 — CVSS 4.9 (medium): Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and…
• CVE-2013-6944 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller…
• CVE-2014-4346 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and…
• CVE-2015-6672 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and…
• CVE-2015-7997 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and…