CVE Intelligence

Citrix Netscaler Sd-wan vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Citrix Netscaler Sd-wan: 3 record(s), with affected versions and fixes.
cpe:2.3:a:citrix:netscaler_sd-wan

CVE-2019-12991 High · 8.8 KEV High · 64 Public exploit CWE-78 Jul 16, 2019
Citrix SD-WAN and NetScaler Command Injection Vulnerability
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).
CVE-2019-12989 Critical · 9.8 KEV Urgent · 75 Public exploit CWE-89 Jul 16, 2019
Citrix SD-WAN and NetScaler SQL Injection Vulnerability
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.
CVE-2017-6316 Critical · 9.8 KEV Urgent · 71 Public exploit Jul 20, 2017
Citrix Multiple Products Remote Code Execution Vulnerability
Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.