How many Citrix application delivery controller CVEs are in CISA KEV?

Yes — 2 of Citrix application delivery controller's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Citrix application delivery controller are affected?

19 distinct Citrix application delivery controller versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Citrix application delivery controller CVEs?

Citrix application delivery controller's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-253 (Incorrect Check of Function Return Value).

What is the average severity of Citrix application delivery controller CVEs?

The average CVSS base score across Citrix application delivery controller's scored CVEs is 7.6.

Citrix application delivery controller Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Citrix application delivery controller vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Citrix application delivery controller Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Citrix application delivery controller has 27 published CVE records since 2019, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Citrix application delivery controller, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Citrix application delivery controller's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High11

Medium10

Low0

In CISA’s Known Exploited Vulnerabilities catalog

2 of Citrix application delivery controller's CVEs are confirmed exploited in the wild.

Public exploits

2 of Citrix application delivery controller's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Citrix application delivery controller version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12.1 <= v < 12.1-55.2962 CVEs
12.1 <= v < 12.1-65.352 CVEs
13.0 <= v < 13.0-90.112 CVEs
13.1 <= v < 13.1-45.612 CVEs
12.1 <= v < 12.1-55.2781 CVE
12.1 <= v < 12.1-64.171 CVE
12.1-64.16 <= v <= 12.1-64.161 CVE
13.0 <= v < 13.0-85.191 CVE
13.1 <= v < 13.1-21.501 CVE
13.1 <= v < 13.1-37.1501 CVE

Fixed in

Common weakness types

The CWE weakness categories most often found in Citrix application delivery controller CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Citrix application delivery controller CVEs were published each year.

2019

2020

2021

2022

2023

Other Citrix products

Browse vulnerabilities for other products by Citrix.

hypervisor62 CVEs xenserver51 CVEs netscaler gateway49 CVEs netscaler application delivery controller38 CVEs netscaler gateway firmware31 CVEs application delivery controller firmware30 CVEs netscaler application delivery controller firmware29 CVEs

Frequently asked questions

Common questions about Citrix application delivery controller vulnerabilities.

How many CVEs does Citrix application delivery controller have?: Citrix application delivery controller has 27 published CVE records since 2019.
How many Citrix application delivery controller CVEs are in CISA KEV?: Yes — 2 of Citrix application delivery controller's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Citrix application delivery controller vulnerabilities?: Yes — 2 of Citrix application delivery controller's CVEs have a known public exploit.
Which versions of Citrix application delivery controller are affected?: 19 distinct Citrix application delivery controller versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Citrix application delivery controller CVEs?: Citrix application delivery controller's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-253 (Incorrect Check of Function Return Value).
How many critical Citrix application delivery controller vulnerabilities are there?: Citrix application delivery controller has 6 critical and 11 high-severity CVEs.
What is the average severity of Citrix application delivery controller CVEs?: The average CVSS base score across Citrix application delivery controller's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Citrix application delivery controller vulnerabilities

Monitor new Citrix application delivery controller vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing