What are the most common weakness types in Citrix netscaler application delivery controller firmware CVEs?

Citrix netscaler application delivery controller firmware's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-254.

Citrix netscaler application delivery controller firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Citrix netscaler application delivery controller firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Citrix netscaler application delivery controller firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Citrix netscaler application delivery controller firmware has 29 published CVE records since 2013, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.7. Affected platforms include netscaler application delivery controller.

Severity and exploitation

How the CVSS severity of Citrix netscaler application delivery controller firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High7

Medium16

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Citrix netscaler application delivery controller firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Citrix netscaler application delivery controller firmware's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Citrix netscaler application delivery controller firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

10.1 <= v <= 10.118 CVEs
10.5 <= v <= 10.514 CVEs
10.0 <= v <= 10.09 CVEs
9.3.e <= v <= 9.3.e7 CVEs
9.3(1) <= v <= 9.3(1)7 CVEs
11.0 <= v <= 11.06 CVEs
11.1 <= v <= 11.16 CVEs
12.0 <= v <= 12.05 CVEs
10.5e <= v <= 10.5e3 CVEs
<= 9.3.e2 CVEs
10.1.120.1316.e <= v <= 10.1.120.1316.e2 CVEs

Common weakness types

The CWE weakness categories most often found in Citrix netscaler application delivery controller firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Citrix netscaler application delivery controller firmware CVEs were published each year.

2013

2014

2015

2016

2017

2018

2019

Other Citrix products

Browse vulnerabilities for other products by Citrix.

hypervisor62 CVEs netscaler gateway59 CVEs xenserver51 CVEs netscaler application delivery controller48 CVEs netscaler gateway firmware31 CVEs application delivery controller firmware30 CVEs application delivery controller27 CVEs

Frequently asked questions

Common questions about Citrix netscaler application delivery controller firmware vulnerabilities.

How many CVEs does Citrix netscaler application delivery controller firmware have?: Citrix netscaler application delivery controller firmware has 29 published CVE records since 2013.
How many Citrix netscaler application delivery controller firmware CVEs are in CISA KEV?: None of Citrix netscaler application delivery controller firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Citrix netscaler application delivery controller firmware vulnerabilities?: Yes — 1 of Citrix netscaler application delivery controller firmware's CVEs have a known public exploit.
Which versions of Citrix netscaler application delivery controller firmware are affected?: 37 distinct Citrix netscaler application delivery controller firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Citrix netscaler application delivery controller firmware CVEs?: Citrix netscaler application delivery controller firmware's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-254.
How many critical Citrix netscaler application delivery controller firmware vulnerabilities are there?: Citrix netscaler application delivery controller firmware has 6 critical and 7 high-severity CVEs.
What is the average severity of Citrix netscaler application delivery controller firmware CVEs?: The average CVSS base score across Citrix netscaler application delivery controller firmware's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Citrix netscaler application delivery controller firmware vulnerabilities

Get an alert for each new Citrix netscaler application delivery controller firmware CVE, with AI-written analysis and remediation steps.

Create an account See pricing