[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPT9ifnVUNEi992QjZlvGwnAsbrk1JKi6rb4Bp1HlHlU":3,"g5a-family:citrix\u002Fapplication_delivery_controller_firmware":194,"g5a-ex:citrix\u002Fapplication_delivery_controller_firmware@*":195},{"success":4,"data":5},true,{"product":6,"versions":73,"topVulnerabilitiesByEpss":100,"kevVulnerabilities":156,"seoMetadata":172,"meta":191},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":72},"citrix","application_delivery_controller_firmware",26,30,5,"2022-12-26",[14,19,22,24,26,29,31,33,35,37,39,41,43,46,48,50,52,54,56,58,60,62,64,66,68,70],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.1",1,0,false,{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},"10.5",6,{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},"10.5-70.18",{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},"10.5e",{"version":27,"cve_count":28,"kev_count":17,"has_kev":18},"11.0",4,{"version":30,"cve_count":21,"kev_count":16,"has_kev":4},"11.1",{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},"11.1-64.14",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"11.1-65.12",{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},"11.1-65.20",{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"11.1-65.22",{"version":40,"cve_count":21,"kev_count":16,"has_kev":4},"12.0",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"12.0-63.21",{"version":44,"cve_count":45,"kev_count":16,"has_kev":4},"12.1",2,{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.238",{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.291",{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-57.18",{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-58.15",{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-61.18",{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-62.23",{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-62.27",{"version":61,"cve_count":45,"kev_count":16,"has_kev":4},"13.0",{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-58.30",{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-64.35",{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-76.29",{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-82.41",{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-82.45","Application Delivery Controller Firmware by Citrix is a technology product with 26 tracked versions and 30 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},{"version":27,"cve_count":28,"kev_count":17,"has_kev":18},{"version":30,"cve_count":21,"kev_count":16,"has_kev":4},{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},{"version":40,"cve_count":21,"kev_count":16,"has_kev":4},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":45,"kev_count":16,"has_kev":4},{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},{"version":61,"cve_count":45,"kev_count":16,"has_kev":4},{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},[101,109,116,120,125,130,137,141,146,151],{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":106,"severity":107,"isKev":4,"epssScore":108},"CVE-2019-19781","An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.","2019-12-27",9.8,"v3.1","Critical",0.99999,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":106,"severity":114,"isKev":4,"epssScore":115},"CVE-2020-8193","Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.","2020-07-10",6.5,"Medium",0.88269,{"cveId":117,"description":118,"publishedDate":112,"cvssScore":113,"cvssVersion":106,"severity":114,"isKev":4,"epssScore":119},"CVE-2020-8195","Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.",0.33029,{"cveId":121,"description":122,"publishedDate":112,"cvssScore":123,"cvssVersion":106,"severity":114,"isKev":4,"epssScore":124},"CVE-2020-8196","Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.",4.3,0.26333,{"cveId":126,"description":127,"publishedDate":112,"cvssScore":128,"cvssVersion":106,"severity":114,"isKev":18,"epssScore":129},"CVE-2020-8191","Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting (XSS).",6.1,0.23461,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":134,"cvssVersion":135,"severity":114,"isKev":18,"epssScore":136},"CVE-2017-17382","Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.","2017-12-13",5.9,"v3.0",0.13877,{"cveId":138,"description":139,"publishedDate":112,"cvssScore":113,"cvssVersion":106,"severity":114,"isKev":18,"epssScore":140},"CVE-2020-8194","Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the modification of a file download.",0.10834,{"cveId":142,"description":143,"publishedDate":144,"cvssScore":105,"cvssVersion":106,"severity":107,"isKev":4,"epssScore":145},"CVE-2022-27518","Unauthenticated remote arbitrary code execution\n","2022-12-13",0.06858,{"cveId":147,"description":148,"publishedDate":149,"cvssScore":105,"cvssVersion":135,"severity":107,"isKev":18,"epssScore":150},"CVE-2018-7218","The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors.","2018-05-17",0.06044,{"cveId":152,"description":153,"publishedDate":154,"cvssScore":113,"cvssVersion":106,"severity":114,"isKev":18,"epssScore":155},"CVE-2020-8300","Citrix ADC and Citrix\u002FNetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.","2021-06-16",0.02997,[157,161,165,168,171],{"cveId":142,"description":143,"publishedDate":144,"cvssScore":105,"severity":107,"isKev":4,"epssScore":145,"cisaVulnName":158,"cisaDateAdded":144,"cisaShortDescription":159,"cisaRequiredAction":160},"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.","Apply updates per vendor instructions.",{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"severity":107,"isKev":4,"epssScore":108,"cisaVulnName":162,"cisaDateAdded":163,"cisaShortDescription":164,"cisaRequiredAction":160},"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","2021-11-03","Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.",{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"severity":114,"isKev":4,"epssScore":115,"cisaVulnName":166,"cisaDateAdded":163,"cisaShortDescription":167,"cisaRequiredAction":160},"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.",{"cveId":117,"description":118,"publishedDate":112,"cvssScore":113,"severity":114,"isKev":4,"epssScore":119,"cisaVulnName":169,"cisaDateAdded":163,"cisaShortDescription":170,"cisaRequiredAction":160},"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.",{"cveId":121,"description":122,"publishedDate":112,"cvssScore":123,"severity":114,"isKev":4,"epssScore":124,"cisaVulnName":169,"cisaDateAdded":163,"cisaShortDescription":170,"cisaRequiredAction":160},{"title":173,"metaDescription":174,"keywords":175,"structuredData":176},"Application Delivery Controller Firmware by Citrix - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Application Delivery Controller Firmware by Citrix covering 26 versions with 30 tracked vulnerabilities including 2 critical and 0 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Application Delivery Controller Firmware vulnerabilities, Application Delivery Controller Firmware security, Application Delivery Controller Firmware CVE, Citrix Application Delivery Controller Firmware, Application Delivery Controller Firmware threat intelligence, Citrix security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Application Delivery Controller Firmware KEV, Application Delivery Controller Firmware exploited vulnerabilities",{"@context":177,"@type":178,"name":179,"description":174,"url":180,"manufacturer":181,"applicationCategory":185,"softwareVersion":186,"mainEntity":187},"https:\u002F\u002Fschema.org","SoftwareApplication","Application Delivery Controller Firmware","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcitrix\u002Fapplication_delivery_controller_firmware",{"@type":182,"name":183,"url":184},"Organization","Citrix","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcitrix","Security Software","26 versions tracked",{"@type":188,"name":189,"description":190,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Application Delivery Controller Firmware Security Vulnerabilities","Security vulnerabilities affecting Application Delivery Controller Firmware by Citrix",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":192,"apiVersion":193},"2026-10-28T15:05:09.118Z","3.0",[],{"rows":196,"total":11,"capped":18,"failed":17},[197,203,207,216,220],{"cveId":142,"name":158,"severity":107,"cvss":105,"added":144,"epss":145,"published":198,"ranges":199,"checked":4,"hits":202,"covers":18},"2022-12-13T17:15:14.35",[200,201],"12.1 to before 12.1-65.25","13.0 to before 13.0-58.32",[],{"cveId":102,"name":162,"severity":107,"cvss":105,"added":163,"epss":108,"published":204,"ranges":205,"checked":4,"hits":206,"covers":18},"2019-12-27T14:15:12.07",[20,30,40,44,61],[],{"cveId":110,"name":166,"severity":114,"cvss":113,"added":163,"epss":115,"published":208,"ranges":209,"checked":4,"hits":215,"covers":18},"2020-07-10T16:15:12.157",[210,211,212,213,214],"10.5 to before 10.5-70.18","11.1 to before 11.1-64.14","12.0 to before 12.0-63.21","12.1 to before 12.1-57.18","13.0 to before 13.0-58.30",[],{"cveId":117,"name":169,"severity":114,"cvss":113,"added":163,"epss":119,"published":217,"ranges":218,"checked":4,"hits":219,"covers":18},"2020-07-10T16:15:12.327",[210,211,212,213,214],[],{"cveId":121,"name":169,"severity":114,"cvss":123,"added":163,"epss":124,"published":221,"ranges":222,"checked":4,"hits":223,"covers":18},"2020-07-10T16:15:12.407",[210,211,212,213,214],[]]