Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Citrix
Gateway Firmware

citrix gateway firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

14 CVEs

5 in CISA KEV

citrix gateway firmware Vulnerabilities

CVE security advisories and vulnerability history for gateway firmware by citrix.

14

Total CVEs

Published

5

In CISA KEV

Exploited in the wild

8

Public exploits

With known exploit

7.6

Avg CVSS

2019–2022

Last updated December 13, 2022

Overview

citrix gateway firmware has 14 published CVE records since 2019, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting citrix gateway firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of citrix gateway firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High1

Medium2

Low0

9 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

5

5 of citrix gateway firmware's CVEs are confirmed exploited in the wild.

Public exploits

8

8 of citrix gateway firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every citrix gateway firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

13.0-58.308 CVEs
12.1-65.251 CVE
13.0-58.321 CVE

Find a version

14 CVEs

Sort

Unauthenticated remote arbitrary code execution
CVE-2022-27518
CISA KEV
Public exploit
Patch
CWE-664
Added to CISA KEV 2022-12-13
Critical · CVSS 9.3
EPSS 27.7% (97th pct)2022-12-13
Vulnerability · 2020-07-10
CVE-2020-8197
Patch
Unscored
EPSS 0.7% (73th pct)2020-07-10
Medium vulnerability · 2020-07-10
CVE-2020-8196
CISA KEV
Public exploit
Patch
CWE-284
Added to CISA KEV 2021-11-03
Medium · CVSS 5.3
EPSS 68.1% (99th pct)2020-07-10
Medium vulnerability · 2020-07-10
CVE-2020-8195
CISA KEV
Public exploit
Patch
CWE-20
Added to CISA KEV 2021-11-03
Medium · CVSS 5.3
EPSS 71.7% (99th pct)2020-07-10
Vulnerability · 2020-07-10
CVE-2020-8198
Patch
CWE-79
Unscored
EPSS 0.4% (60th pct)2020-07-10
Vulnerability · 2020-07-10
CVE-2020-8194
Patch
CWE-94
Unscored
EPSS 81.1% (99th pct)2020-07-10
High vulnerability · 2020-07-10
CVE-2020-8193
CISA KEV
Public exploit
Patch
CWE-284
Added to CISA KEV 2021-11-03
High · CVSS 8.7
EPSS 94.4% (100th pct)2020-07-10
Vulnerability · 2020-07-10
CVE-2020-8191
Patch
CWE-79
Unscored
EPSS 91.0% (100th pct)2020-07-10
Vulnerability · 2020-07-10
CVE-2020-8190
Patch
Unscored
EPSS 0.3% (51th pct)2020-07-10
Vulnerability · 2020-03-06
CVE-2020-10112
Public exploit
Unscored
EPSS 0.5% (66th pct)2020-03-06
Vulnerability · 2020-03-06
CVE-2020-10111
Public exploit
Unscored
EPSS 0.5% (66th pct)2020-03-06
Vulnerability · 2020-03-06
CVE-2020-10110
Public exploit
Unscored
EPSS 0.6% (69th pct)2020-03-06
Critical vulnerability · 2019-12-27
CVE-2019-19781
CISA KEV
Public exploit
CWE-22
Added to CISA KEV 2021-11-03
Critical · CVSS 9.3
EPSS 94.4% (100th pct)2019-12-27
Vulnerability · 2019-10-21
CVE-2019-18225
Unscored
EPSS 0.2% (42th pct)2019-10-21

Common weakness types

The CWE weakness categories most often found in citrix gateway firmware CVEs. Follow any weakness for its full explanation.

CWE-284Improper Access Control2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-20Improper Input Validation1 CVE
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE
CWE-664Improper Control of a Resource Through its Lifetime1 CVE
CWE-94Improper Control of Generation of Code ('Code Injection')1 CVE

Disclosure activity by year

How many citrix gateway firmware CVEs were published each year.

2019

2

2020

11

2022

1

Other citrix products

Browse vulnerabilities for other products by citrix.

hypervisor62 CVEs xenserver51 CVEs netscaler gateway43 CVEs netscaler application delivery controller32 CVEs netscaler gateway firmware31 CVEs application delivery controller firmware30 CVEs netscaler application delivery controller firmware29 CVEs application delivery controller27 CVEs

All citrix vulnerabilities

Frequently asked questions

Common questions about citrix gateway firmware vulnerabilities.

How many CVEs does citrix gateway firmware have?

citrix gateway firmware has 14 published CVE records since 2019.

How many citrix gateway firmware CVEs are in CISA KEV?

Yes — 5 of citrix gateway firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for citrix gateway firmware vulnerabilities?

Yes — 8 of citrix gateway firmware's CVEs have a known public exploit.

Which versions of citrix gateway firmware are affected?

3 distinct citrix gateway firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in citrix gateway firmware CVEs?

citrix gateway firmware's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical citrix gateway firmware vulnerabilities are there?

citrix gateway firmware has 2 critical and 1 high-severity CVEs.

What is the average severity of citrix gateway firmware CVEs?

The average CVSS base score across citrix gateway firmware's scored CVEs is 7.6.

References

All citrix vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track citrix gateway firmware vulnerabilities

Monitor new citrix gateway firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References