Citrix Netscaler Application Delivery Controller Sårbarheter

Version

10.5	12
10.0	10
10.1	10
10.2	10
10.3	10

Åtgärd

Official Fix	16
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Utnyttjbarhet

High	0
Functional	0
Proof-of-Concept	0
Unproven	4
Not Defined	12

Åtkomstvektor

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	14

Autentisering

Not Defined	0
High	0
Low	2
None	14

Användarinteraktion

Not Defined	0
Required	0
None	16

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	8
≤7	4
≤8	4
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	10
≤7	6
≤8	0
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	8
≤7	2
≤8	6
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	2
≤8	2
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	0
<2k	0
<5k	0
<10k	10
<25k	6
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	16
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (34): 9.3, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.5 Build 55, 10.5 Build 55.1, 10.5 Build 55.2, 10.5 Build 55.3, 10.5 Build 55.4, 10.5 Build 55.5, 10.5 Build 55.6, 10.5 Build 55.7, 10.5 Build 55.8, 10.5.a, 10.5.b, 10.5.c, 10.5.d, 10.5.e, 10.5.e Build 53-9010.a, 10.5.e Build 53-9010.b, 10.5.e Build 53-9010.c, 10.5.e Build 53-9010.d, 10.5.e Build 53-9010.e, 10.5a, 10.5b, 10.5c, 10.5d, 10.5e, 11.0, 11.1, 12.0

Link to Product Website: https://www.citrix.com/

Programvarutyp: Network Management Software

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
17/05/2018	8.5	8.4	Citrix Netscaler Application Delivery Controller AppFirewall privilegier eskalering	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2018-7218
13/12/2017	4.8	4.6	Citrix Netscaler Application Delivery Controller/Gateway TLS Handshake informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-17549
13/12/2017	5.7	5.5	Citrix Netscaler Application Delivery Controller TLS Bleichenbacher informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-17382
26/09/2017	5.9	5.7	Citrix Netscaler Application Delivery Controller Management Interface privilegier eskalering	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-14602
02/08/2017	5.7	5.7	Citrix Netscaler Application Delivery Controller informationsgivning	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.02	CVE-2015-3642
17/02/2016	6.7	6.6	Citrix Netscaler Application Delivery Controller Administrative Web Interface privilegier eskalering	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2072
17/02/2016	9.8	9.6	Citrix Netscaler Application Delivery Controller NS Web GUI Command privilegier eskalering	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-2071
17/11/2015	5.3	5.1	Citrix Netscaler Application Delivery Controller/Gateway Administration UI informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-7998
17/11/2015	4.3	4.1	Citrix Netscaler Application Delivery Controller/Gateway cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-7997
17/11/2015	5.3	5.1	Citrix Netscaler Application Delivery Controller/Gateway Nitro API informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2015-7996