CVEs referencing
https://support.citrix.com/article/CTX276688
Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack.
Max Base Score
7.5
Published
2020-07-10
Updated
2020-07-13
EPSS
0.11%
Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation.
Max Base Score
7.5
Published
2020-07-10
Updated
2020-07-13
EPSS
0.10%
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting (XSS).
Max Base Score
6.1
Published
2020-07-10
Updated
2020-07-13
EPSS
0.21%
CVE-2020-8193
Known Exploited Vulnerability
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.
Max Base Score
6.5
Published
2020-07-10
Updated
2022-09-20
EPSS
93.75%
KEV Added
2021-11-03
Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the modification of a file download.
Max Base Score
6.5
Published
2020-07-10
Updated
2020-07-13
EPSS
90.78%
CVE-2020-8195
Known Exploited Vulnerability
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
Max Base Score
6.5
Published
2020-07-10
Updated
2022-09-20
EPSS
86.94%
KEV Added
2021-11-03
CVE-2020-8196
Known Exploited Vulnerability
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
Max Base Score
4.3
Published
2020-07-10
Updated
2022-09-20
EPSS
0.20%
KEV Added
2021-11-03
Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access to execute arbitrary commands.
Max Base Score
8.8
Published
2020-07-10
Updated
2021-07-21
EPSS
0.10%
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in Stored Cross-Site Scripting (XSS).
Max Base Score
6.1
Published
2020-07-10
Updated
2020-07-13
EPSS
0.08%
Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root.
Max Base Score
7.8
Published
2020-07-10
Updated
2021-07-21
EPSS
0.04%