CVE security advisories and vulnerability history for application delivery controller firmware by Citrix.
30
Total CVEs
Published
5
In CISA KEV
Exploited in the wild
5
Public exploits
PoC or exploit code
7.6
Avg CVSS
2017–2022
Last updated
Overview
Citrix application delivery controller firmware has 30 published CVE records since 2017, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Citrix application delivery controller firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include application delivery controller, mpx 15030-50g fips, mpx 15040-50g fips, mpx 15060-50g fips, mpx 15080-50g fips, mpx 15100-50g fips.
Severity and exploitation
How the CVSS severity of Citrix application delivery controller firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical7
High11
Medium12
Low0
In CISA’s Known Exploited Vulnerabilities catalog
5
5 of Citrix application delivery controller firmware's CVEs are confirmed exploited in the wild.
Public exploits
5
5 of Citrix application delivery controller firmware's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Citrix application delivery controller firmware version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
10.5 <= v < 10.5-70.188 CVEs
11.1 <= v < 11.1-64.148 CVEs
12.0 <= v < 12.0-63.218 CVEs
12.1 <= v < 12.1-57.188 CVEs
13.0 <= v < 13.0-58.308 CVEs
10.5 <= v <= 10.56 CVEs
11.1 <= v <= 11.16 CVEs
12.0 <= v <= 12.06 CVEs
11.0 <= v <= 11.04 CVEs
12.1 <= v < 12.1-55.2384 CVEs
11.1 <= v < 11.1-65.123 CVEs
Common weakness types
The CWE weakness categories most often found in Citrix application delivery controller firmware CVEs. Follow any weakness for its full explanation.
Common questions about Citrix application delivery controller firmware vulnerabilities.
How many CVEs does Citrix application delivery controller firmware have?
Citrix application delivery controller firmware has 30 published CVE records since 2017.
How many Citrix application delivery controller firmware CVEs are in CISA KEV?
Yes — 5 of Citrix application delivery controller firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Citrix application delivery controller firmware vulnerabilities?
Yes — 5 of Citrix application delivery controller firmware's CVEs have a known public exploit.
Which versions of Citrix application delivery controller firmware are affected?
76 distinct Citrix application delivery controller firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Citrix application delivery controller firmware CVEs?
Citrix application delivery controller firmware's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-284 (Improper Access Control), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation).
How many critical Citrix application delivery controller firmware vulnerabilities are there?
Citrix application delivery controller firmware has 7 critical and 11 high-severity CVEs.
What is the average severity of Citrix application delivery controller firmware CVEs?
The average CVSS base score across Citrix application delivery controller firmware's scored CVEs is 7.6.
