Medium severity6.5NVD Advisory· Published Dec 26, 2022· Updated Jun 17, 2026

CVE-2019-18177

Description

In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.

Affected products

Citrix Systems/Gateway2 versions
cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*range: <13.0-58.30
- (no CPE)range: 13.0-58.30 and later releases before CTX276688 update
Citrix Systems/Netscaler Application Delivery Controller
cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
Range: <13.0-58.30
Citrix/ADCdescription
Citrix Systems/ADCllm-fuzzy
Range: 13.0-58.30 and later releases before CTX276688 update

Patches

Vulnerability mechanics

References

support.citrix.com/article/CTX276688/citrix-application-delivery-controller-citrix-gateway-and-citrix-sdwan-wanop-appliance-security-updatenvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000