Sploitus

7 exploited vulnerabilities in Citrix Gateway

Vulnerabilities with publicly known exploits

Vendors
Citrix
With known exploits
7
Affected Citrix Application Delivery Controller Firmware versions
= 10.5, 11.1, 12.0, 12.1, 13.0, 10.5-70.18, 11.1-64.14, 12.0-63.21, 12.1-57.18, 13.0-58.30
Affected Citrix Gateway Firmware versions
= 11.1, 12.0, 12.1
Affected Citrix Gateway versions
< 12.1-65.35, 13.0-90.11, 13.1-45.61

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2019-19781 50 exploits
CVSS 10.0 CRITICAL 2019-12-17FIX AVAILABLE
Exploit for Path Traversal in Citrix Application_Delivery_Controller_FirmwareExploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware
CVE-2020-10111 2 exploits
CVSS 7.5 HIGH 2020-03-06FIX AVAILABLE
Citrix Gateway 11.1 / 12.0 / 12.1 Cache Bypass VulnerabilityCitrix Gateway 11.1 / 12.0 / 12.1 Cache Bypass
CVE-2020-8193 4 exploits
CVSS 6.5 MEDIUM 2020-07-07FIX AVAILABLE
Citrix ADC NetScaler Local File Inclusion ExploitCitrix ADC NetScaler - Local File Inclusion (Metasploit)
CVE-2020-8195 4 exploits
CVSS 6.5 MEDIUM 2020-07-07FIX AVAILABLE
Citrix ADC NetScaler Local File Inclusion ExploitCitrix ADC NetScaler - Local File Inclusion (Metasploit)
CVE-2023-24488 3 exploits
CVSS 6.1 MEDIUM 2023-05-09
Exploit for Cross-site Scripting in Citrix GatewayExploit for Cross-site Scripting in Citrix Gateway
CVE-2020-10112 2 exploits
CVSS 5.8 MEDIUM 2020-03-06
Citrix Gateway 11.1 / 12.0 / 12.1 Cache Poisoning VulnerabilityCitrix Gateway 11.1 / 12.0 / 12.1 Cache Poisoning
CVE-2020-10110 2 exploits
CVSS 5.3 MEDIUM 2020-03-06
Citrix Gateway 11.1 / 12.0 / 12.1 Information Disclosure VulnerabilityCitrix Gateway 11.1 / 12.0 / 12.1 Information Disclosure