Citrix Application Delivery Controller Firmware vulnerabilities

30 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited Citrix Application Delivery Controller Firmware vulnerabilities

CVE-2022-27518 — Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
CVE-2020-8196 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
CVE-2020-8195 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
CVE-2020-8193 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
CVE-2019-19781 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

CVE-2019-18177 — (CVSS 6.5)
CVE-2022-27518 — Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability (CVSS 9.8) — exploited
CVE-2022-27516 — User login brute force protection functionality bypass (CVSS 9.8)
CVE-2022-27513 — Remote desktop takeover via phishing (CVSS 9.6)
CVE-2022-27510 — Unauthorized access to Gateway user capabilities (CVSS 9.8)
CVE-2022-27509 — Unauthenticated redirection to a malicious website (CVSS 6.1)
CVE-2021-22956 — (CVSS 7.5)
CVE-2021-22955 — (CVSS 7.5)
CVE-2021-22927 — (CVSS 8.1)
CVE-2021-22919 — (CVSS 7.5)
CVE-2020-8300 — (CVSS 6.5)
CVE-2020-8299 — (CVSS 6.5)
CVE-2020-8247 — (CVSS 8.8)
CVE-2020-8246 — (CVSS 7.5)
CVE-2020-8245 — (CVSS 6.1)
CVE-2020-8198 — (CVSS 6.1)
CVE-2020-8197 — (CVSS 8.8)
CVE-2020-8196 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability (CVSS 4.3) — exploited
CVE-2020-8195 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability (CVSS 6.5) — exploited
CVE-2020-8194 — (CVSS 6.5)
CVE-2020-8193 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability (CVSS 6.5) — exploited
CVE-2020-8191 — (CVSS 6.1)
CVE-2020-8190 — (CVSS 7.5)
CVE-2020-8187 — (CVSS 7.5)
CVE-2019-19781 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability (CVSS 9.8) — exploited