Citrix Adc Sårbarheter

Tidslinje

Version

10.5	5
11.0	5
11.1	5
12.0	4
12.1	2

Åtgärd

Official Fix	41
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	3

Utnyttjbarhet

High	5
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	39

Åtkomstvektor

Not Defined	0
Physical	0
Local	3
Adjacent	8
Network	33

Autentisering

Not Defined	0
High	0
Low	15
None	29

Användarinteraktion

Not Defined	0
Required	10
None	34

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	5
≤5	4
≤6	11
≤7	11
≤8	7
≤9	4
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	3
≤5	6
≤6	13
≤7	7
≤8	7
≤9	4
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	7
≤5	9
≤6	8
≤7	7
≤8	9
≤9	2
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	9
≤8	9
≤9	2
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	1
≤9	4
≤10	3

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	1
≤9	1
≤10	1

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	0
<2k	0
<5k	5
<10k	15
<25k	22
<50k	0
<100k	2
≥100k	0

Utnyttja idag

<1k	32
<2k	2
<5k	7
<10k	1
<25k	2
<50k	0
<100k	0
≥100k	0

Affected Versions (42): 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.5-70, 10.5.a, 10.5.b, 10.5.c, 10.5.d, 10.5.e, 11.0, 11.1, 11.1-63, 11.1-63.1, 11.1-63.2, 11.1-63.3, 11.1-63.4, 11.1-63.5, 11.1-63.6, 11.1-63.7, 11.1-63.8, 11.1-64, 12.0, 12.0-62, 12.0-62.1, 12.0-62.2, 12.0-62.3, 12.0-62.4, 12.0-62.5, 12.0-62.6, 12.0-62.7, 12.0-62.8, 12.0-62.9, 12.0-63, 12.1, 12.1-57, 13.0, 13.0-58, 13.0-82.45, 13.1

Link to Product Website: https://www.citrix.com/

Programvarutyp: Network Management Software

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
16/01/2024	7.7	7.6	Citrix NetScaler ADC/NetScaler Gateway minneskorruption	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2023-6549
16/01/2024	6.9	6.8	Citrix NetScaler ADC/NetScaler Gateway NSIP/CLIP/SNIP privilegier eskalering	$5k-$25k	$0-$5k	High	Official Fix	0.03	CVE-2023-6548
27/10/2023	7.7	7.6	Citrix NetScaler ADC/NetScaler Gateway minneskorruption	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-4967
10/10/2023	8.3	8.2	Citrix NetScaler ADC/NetScaler Gateway OpenID openid-configuration ns_aaa_oauthrp_send_openid_config CitrixBleed minneskorruption	$25k-$100k	$0-$5k	High	Official Fix	0.04	CVE-2023-4966
18/07/2023	9.8	9.6	Citrix NetScaler ADC/NetScaler Gateway privilegier eskalering	$25k-$100k	$5k-$25k	High	Official Fix	0.00	CVE-2023-3519
18/07/2023	8.0	7.9	Citrix NetScaler ADC/NetScaler Gateway Management Interface privilegier eskalering	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-3467
18/07/2023	6.4	6.4	Citrix NetScaler ADC/NetScaler Gateway cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-3466
11/05/2023	4.3	4.1	Citrix ADC/Gateway cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2023-24488
11/05/2023	5.5	5.3	Citrix ADC/Gateway NSIP/SNIP Remote Code Execution	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-24487
27/12/2022	5.4	5.3	Citrix ADC/Gateway SSL VPN Endpoint informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2019-18177