CVE-2020-8195VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-8195: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

Affects Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 33.0% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-8195 (opens in a new tab)

Description

CVE-2020-8195 is an information disclosure vulnerability affecting Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models. The vulnerability allows unauthorized access to sensitive information. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

This vulnerability in Citrix ADC, Gateway, and SD-WAN WANOP appliances allows attackers to disclose sensitive information. The exact technical details and affected versions are not specified in the provided data. The vulnerability is tracked as CVE-2020-8195 and has been observed to be exploited in the wild, indicating active threat activity targeting these products.

Impact

The vulnerability leads to information disclosure, which can compromise confidentiality of data handled by the affected Citrix appliances. Exploitation in the wild confirms that attackers have leveraged this flaw, potentially exposing sensitive information to unauthorized parties.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor official Citrix advisories for updates and apply any recommended fixes promptly.

Weaknesses

CWE-20Improper Input Validation (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:27:23 UTC

Weaknesses

References

Related threats