citrix kayıtları
citrix üreticisine ait 466 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 28 · %6
- Silahlaştırılmış
- 34 · %7,3
- Pre-auth RCE
- 54
- Düzeltme kaydı olan
- %30
- Yayından KEV’e ortanca
- 120 gün
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer29
- CWE-20 Improper Input Validation28
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')26
- CWE-264 Permissions, Privileges, and Access Controls25
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor23
- CWE-269 Improper Privilege Management21
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWEBug bounty kapsamı
Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.
Tüm kayıtlar
466 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
99Hemen | CVE-2014-6271Silahlaştırılmış | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attacgnu · bash · CWE-78 | Kritik9,8 | KEV | %100,0 | 24 Eyl 2014 |
99Hemen | CVE-2019-19781Silahlaştırılmış | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0.citrix · application delivery controller firmware · CWE-22 | Kritik9,8 | KEV | %100,0 | 27 Ara 2019 |
99Hemen | CVE-2014-7169Silahlaştırılmış | GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variablgnu · bash · CWE-78 | Kritik9,8 | KEV | %99,9 | 24 Eyl 2014 |
99Hemen | CVE-2023-3519Silahlaştırılmış | Unauthenticated remote code executioncitrix · netscaler application delivery controller · CWE-94 | Kritik9,8 | KEV | %99,7 | 19 Tem 2023 |
98Hemen | CVE-2023-24489Silahlaştırılmış | A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthentcitrix · sharefile storage zones controller · CWE-284 | Kritik9,8 | KEV | %97,3 | 10 Tem 2023 |
97Hemen | CVE-2025-5777Silahlaştırılmış | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overreadcitrix · netscaler application delivery controller · CWE-125 | Kritik9,3 | KEV | %100,0 | 17 Haz 2025 |
97Hemen | CVE-2019-12989Silahlaştırılmış | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.citrix · netscaler sd-wan · CWE-89 | Kritik9,8 | KEV | %95,0 | 16 Tem 2019 |
91Hemen | CVE-2017-6316Silahlaştırılmış | Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID citrix · netscaler sd-wan | Kritik9,8 | KEV | %73,0 | 20 Tem 2017 |
90Hemen | CVE-2023-4966Silahlaştırılmış | Unauthenticated sensitive information disclosurecitrix · netscaler application delivery controller · CWE-119 | Yüksek7,5 | KEV | %100,0 | 10 Eki 2023 |
87Hemen | CVE-2019-12991Silahlaştırılmış | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).citrix · netscaler sd-wan · CWE-78 | Yüksek8,8 | KEV | %74,1 | 16 Tem 2019 |
85Hemen | CVE-2021-22941Silahlaştırılmış | Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely comprocitrix · sharefile storagezones controller · CWE-284 | Kritik9,8 | KEV | %53,6 | 23 Eyl 2021 |
83Hemen | CVE-2020-8193Silahlaştırılmış | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Ccitrix · application delivery controller firmware · CWE-284 | Orta6,5 | KEV | %88,4 | 10 Tem 2020 |
77Bu hafta | CVE-2023-6549Silahlaştırılmış | Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denialcitrix · netscaler application delivery controller · CWE-119 | Yüksek7,5 | KEV | %57,6 | 17 Oca 2024 |
72Bu hafta | CVE-2025-7775Silahlaştırılmış | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Servicecitrix · netscaler application delivery controller · CWE-119 | Kritik9,2 | KEV | %19,6 | 26 Ağu 2025 |
71Bu hafta | CVE-2019-11634Silahlaştırılmış | Citrix Workspace App before 1904 for Windows has Incorrect Access Control.citrix · receiver · CWE-284 | Kritik9,8 | KEV | %8,0 | 22 May 2019 |
71Bu hafta | CVE-2022-27518Silahlaştırılmış | Unauthenticated remote arbitrary code executioncitrix · application delivery controller firmware · CWE-664 | Kritik9,8 | KEV | %6,7 | 13 Ara 2022 |
69Bu hafta | CVE-2019-13608Silahlaştırılmış | Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.citrix · storefront server · CWE-611 | Yüksek7,5 | KEV | %30,0 | 29 Ağu 2019 |
69Bu hafta | CVE-2025-6543Silahlaştırılmış | Memory overflow vulnerability leading to unintended control flow and Denial of Servicecitrix · netscaler application delivery controller · CWE-119 | Kritik9,2 | KEV | %10,6 | 25 Haz 2025 |
69Bu hafta | CVE-2026-19490Silahlaştırılmış | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490citrix · netscaler application delivery controller · CWE-288 | Kritik9,3 | KEV | %7,0 | 19 Ağu 2026 |
68Bu hafta | CVE-2026-3055Silahlaştırılmış | Insufficient input validation leading to memory overreadcitrix · netscaler application delivery controller · CWE-125 | Kritik9,3 | KEV | %4,0 | 23 Mar 2026 |
68Bu hafta | CVE-2026-88772Silahlaştırılmış | Memory overflow vulnerability leading to Remote Code Execution or Denial of Servicecitrix · netscaler application delivery controller · CWE-119 | Kritik9,5 | KEV | %1,2 | 2 gün önce |
68Bu hafta | CVE-2026-88771Silahlaştırılmış | A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandscitrix · netscaler application delivery controller · CWE-20 | Kritik9,5 | KEV | %1,0 | 2 gün önce |
66Bu hafta | CVE-2020-8195Silahlaştırılmış | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 andcitrix · application delivery controller firmware · CWE-20 | Orta6,5 | KEV | %33,0 | 10 Tem 2020 |
66Bu hafta | CVE-2023-6548Silahlaştırılmış | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIcitrix · netscaler application delivery controller · CWE-94 | Yüksek8,8 | KEV | %3,2 | 17 Oca 2024 |
65Bu hafta | CVE-2026-8452Silahlaştırılmış | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Servicecitrix · netscaler application delivery controller · CWE-119 | Yüksek8,8 | KEV | %1,0 | 30 Haz 2026 |
- CVE-2014-627199Hemen
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100gnu · bash24 Eyl 2014
- CVE-2019-1978199Hemen
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100citrix · application delivery controller firmware27 Ara 2019
- CVE-2014-716999Hemen
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100gnu · bash24 Eyl 2014
- CVE-2023-351999Hemen
Unauthenticated remote code execution
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100citrix · netscaler application delivery controller19 Tem 2023
- CVE-2023-2448998Hemen
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthent
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97citrix · sharefile storage zones controller10 Tem 2023
- CVE-2025-577797Hemen
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %100citrix · netscaler application delivery controller17 Haz 2025
- CVE-2019-1298997Hemen
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95citrix · netscaler sd-wan16 Tem 2019
- CVE-2017-631691Hemen
Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %73citrix · netscaler sd-wan20 Tem 2017
- CVE-2023-496690Hemen
Unauthenticated sensitive information disclosure
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100citrix · netscaler application delivery controller10 Eki 2023
- CVE-2019-1299187Hemen
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %74citrix · netscaler sd-wan16 Tem 2019
- CVE-2021-2294185Hemen
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compro
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %54citrix · sharefile storagezones controller23 Eyl 2021
- CVE-2020-819383Hemen
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and C
OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %88citrix · application delivery controller firmware10 Tem 2020
- CVE-2023-654977Bu hafta
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %58citrix · netscaler application delivery controller17 Oca 2024
- CVE-2025-777572Bu hafta
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
KritikCVSS 9,2KEVSilahlaştırılmışEPSS %20citrix · netscaler application delivery controller26 Ağu 2025
- CVE-2019-1163471Bu hafta
Citrix Workspace App before 1904 for Windows has Incorrect Access Control.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %8citrix · receiver22 May 2019
- CVE-2022-2751871Bu hafta
Unauthenticated remote arbitrary code execution
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %7citrix · application delivery controller firmware13 Ara 2022
- CVE-2019-1360869Bu hafta
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %30citrix · storefront server29 Ağu 2019
- CVE-2025-654369Bu hafta
Memory overflow vulnerability leading to unintended control flow and Denial of Service
KritikCVSS 9,2KEVSilahlaştırılmışEPSS %11citrix · netscaler application delivery controller25 Haz 2025
- CVE-2026-1949069Bu hafta
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %7citrix · netscaler application delivery controller19 Ağu 2026
- CVE-2026-305568Bu hafta
Insufficient input validation leading to memory overread
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %4citrix · netscaler application delivery controller23 Mar 2026
- CVE-2026-8877268Bu hafta
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
KritikCVSS 9,5KEVSilahlaştırılmışEPSS %1citrix · netscaler application delivery controller2 gün önce
- CVE-2026-8877168Bu hafta
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
KritikCVSS 9,5KEVSilahlaştırılmışEPSS %1citrix · netscaler application delivery controller2 gün önce
- CVE-2020-819566Bu hafta
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and
OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %33citrix · application delivery controller firmware10 Tem 2020
- CVE-2023-654866Bu hafta
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLI
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %3citrix · netscaler application delivery controller17 Oca 2024
- CVE-2026-845265Bu hafta
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %1citrix · netscaler application delivery controller30 Haz 2026