What’s Vulnerable › Vulnerabilities

CVE-2022-27512: Temporary disruption of the ADM license service

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-16 · updated 2026-06-17
• Weakness: CWE-664

Description

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM.

Affected products

• Citrix Application Delivery Management (Citrix ADM): before 13.0-85.19; from 13.1 before 13.1-21.53 — fixed in 13.0-85.19, 13.1-21.53
• Citrix Application Delivery Management (Citrix ADM): before 13.1-21.53; before 13.0-85.19 — fixed in 13.1-21.53, 13.0-85.19

How to fix

Upgrade to a fixed version: Citrix Application Delivery Management (Citrix ADM) 13.0-85.19, 13.1-21.53; Citrix Application Delivery Management (Citrix ADM) 13.1-21.53, 13.0-85.19. Check the vendor advisory for mitigations.

References

• https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-cve202227512
• https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-cve202227512

Get alerted when CVE-2022-27512 or the next vulnerability affects your stack