VYPR

Netscaler SD-WAN

by Citrix Systems

CVEs (16)

  • CVE-2019-12989CriKEVJul 16, 2019
    Netscaler
    SD-WAN
    risk 0.86cvss 9.8epss 0.94

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

  • CVE-2017-6316CriKEVJul 20, 2017
    Citrix Systems
    Netscaler SD-WAN
    risk 0.85cvss 9.8epss 0.73

    Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.

  • CVE-2019-12991HigKEVJul 16, 2019
    Netscaler
    SD-WAN
    risk 0.78cvss 8.8epss 0.74

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).

  • CVE-2019-12990CriJul 16, 2019
    Netscaler
    SD-WAN
    risk 0.67cvss 9.8epss 0.39

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.

  • CVE-2019-12988CriJul 16, 2019
    Netscaler
    SD-WAN
    risk 0.67cvss 9.8epss 0.43

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).

  • CVE-2019-12987CriJul 16, 2019
    Netscaler
    SD-WAN
    risk 0.67cvss 9.8epss 0.43

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).

  • CVE-2019-12986CriJul 16, 2019
    Netscaler
    SD-WAN
    risk 0.67cvss 9.8epss 0.40

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6).

  • CVE-2019-12985CriJul 16, 2019
    Netscaler
    SD-WAN
    risk 0.67cvss 9.8epss 0.40

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6).

  • CVE-2018-17445CriOct 23, 2018
    Citrix Systems
    SD-WAN
    risk 0.65cvss 9.8epss 0.11

    A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

  • CVE-2018-17448CriOct 23, 2018
    Citrix Systems
    SD-WAN
    risk 0.64cvss 9.8epss 0.02

    An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

  • CVE-2018-17446CriOct 23, 2018
    Citrix Systems
    SD-WAN
    risk 0.64cvss 9.8epss 0.02

    A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

  • CVE-2019-12992HigJul 16, 2019
    Netscaler
    SD-WAN
    risk 0.61cvss 8.8epss 0.49

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).

  • CVE-2018-17447HigOct 23, 2018
    Citrix Systems
    SD-WAN
    risk 0.49cvss 7.5epss 0.02

    An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

  • CVE-2018-17444HigOct 23, 2018
    Citrix Systems
    SD-WAN
    risk 0.49cvss 7.5epss 0.04

    A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

  • CVE-2018-5314HigMar 1, 2018
    Citrix Systems
    NetScaler ADC
    risk 0.49cvss 7.5epss 0.03

    Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN…

  • CVE-2019-11550MedMay 8, 2019
    Netscaler
    SD-WAN
    risk 0.38cvss 5.9epss 0.01

    Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.