Advisories · Technology
Citrix NetScaler Gateway.
Every CVE that names Citrix NetScaler Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
TCP Initial Sequence Number (ISN) prediction
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- CWE-342
- CVSS 8.8 High
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- Memory corruption
- CVSS 8.8 High
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- Memory corruption
- CVSS 8.8 High
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
HTTP Request Smuggling
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- HTTP request smuggling
- CVSS 7.0 High
Feature policy bypass due to improper HTTP URL based expression usage
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- CWE-20
- CVSS 9.5 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- Memory corruption
- CVSS 9.5 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- CWE-20
- CVSS 9.4 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Unauthenticated sensitive information disclosure
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- Memory corruption
- CVSS 8.0 High
Improper privilege management in Citrix NetScaler ADC and others
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- Privilege escalation
- CVSS 8.3 High
Improper input validation in Citrix NetScaler ADC and others
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- CWE-20
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Code injection in Citrix NetScaler ADC and others
- Citrix NetScaler ADC
- Citrix NetScaler Gateway
- Code injection