Citrix : Security Vulnerabilities, CVEs, Published In 2014 (Code Execution)
Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors.
Max CVSS
7.5
EPSS Score
48.35%
Published
2014-10-21
Updated
2015-11-25
Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which triggers a heap-based buffer overflow.
Max CVSS
6.8
EPSS Score
5.53%
Published
2014-08-12
Updated
2017-08-29
Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a long CSEC HTTP response header.
Max CVSS
9.3
EPSS Score
34.41%
Published
2014-06-18
Updated
2017-08-29
3 vulnerabilities found