CVE security advisories and vulnerability history for netscaler gateway firmware by Citrix.
31
Total CVEs
Published
4
In CISA KEV
Exploited in the wild
4
Public exploits
PoC or exploit code
7.0
Avg CVSS
2014–2020
Last updated
Overview
Citrix netscaler gateway firmware has 31 published CVE records since 2014, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Citrix netscaler gateway firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include netscaler gateway.
Severity and exploitation
How the CVSS severity of Citrix netscaler gateway firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical6
High10
Medium15
Low0
In CISA’s Known Exploited Vulnerabilities catalog
4
4 of Citrix netscaler gateway firmware's CVEs are confirmed exploited in the wild.
Public exploits
4
4 of Citrix netscaler gateway firmware's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Citrix netscaler gateway firmware version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
10.5 <= v <= 10.519 CVEs
11.1 <= v <= 11.112 CVEs
12.0 <= v <= 12.011 CVEs
11.0 <= v <= 11.010 CVEs
10.5 <= v < 10.5-70.188 CVEs
11.1 <= v < 11.1-64.148 CVEs
12.0 <= v < 12.0-63.218 CVEs
12.1 <= v < 12.1-57.188 CVEs
10.1 <= v <= 10.17 CVEs
10.5e <= v <= 10.5e5 CVEs
12.1 <= v <= 12.13 CVEs
Common weakness types
The CWE weakness categories most often found in Citrix netscaler gateway firmware CVEs. Follow any weakness for its full explanation.
Common questions about Citrix netscaler gateway firmware vulnerabilities.
How many CVEs does Citrix netscaler gateway firmware have?
Citrix netscaler gateway firmware has 31 published CVE records since 2014.
How many Citrix netscaler gateway firmware CVEs are in CISA KEV?
Yes — 4 of Citrix netscaler gateway firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Citrix netscaler gateway firmware vulnerabilities?
Yes — 4 of Citrix netscaler gateway firmware's CVEs have a known public exploit.
Which versions of Citrix netscaler gateway firmware are affected?
47 distinct Citrix netscaler gateway firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Citrix netscaler gateway firmware CVEs?
Citrix netscaler gateway firmware's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-284 (Improper Access Control), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical Citrix netscaler gateway firmware vulnerabilities are there?
Citrix netscaler gateway firmware has 6 critical and 10 high-severity CVEs.
What is the average severity of Citrix netscaler gateway firmware CVEs?
The average CVSS base score across Citrix netscaler gateway firmware's scored CVEs is 7.0.
