Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.
CVE-2022-27518 is an authentication bypass vulnerability in Citrix Application Delivery Controller (ADC) and Gateway when configured with SAML SP or IdP. This flaw allows attackers to bypass authentication and execute code with administrator privileges. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2021-22941 is an improper access control vulnerability in Citrix ShareFile storage zones controller that allows unauthenticated remote attackers to compromise the controller. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It poses a high risk due to unauthorized access potential.
CVE-2019-12989 is a high-severity SQL Injection vulnerability affecting Citrix SD-WAN and NetScaler SD-WAN products. This vulnerability allows attackers to execute unauthorized SQL commands on the affected systems. It has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information is provided in the available data.
CVE-2019-12991 is an authenticated command injection vulnerability affecting Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance. This vulnerability allows an authenticated attacker to execute arbitrary commands on the affected devices. It has been exploited in the wild, indicating active threat activity. The severity is assessed as high due to the potential impact of command injection on critical network infrastructure.
CVE-2017-6316 is a high-severity remote code execution vulnerability affecting the management interfaces of Citrix NetScaler SD-WAN Enterprise and Standard Edition, Citrix CloudBridge Virtual WAN Edition, and XenMobile Server. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code with root privileges. This vulnerability has been exploited in the wild. No explicit patch or remediation information is provided in the input data.
CVE-2020-8193 is an authorization bypass vulnerability affecting Citrix ADC, Gateway, and multiple Citrix SD-WAN WANOP appliance models. This flaw allows unauthenticated attackers with access to the NetScaler IP (NSIP) to access certain URL endpoints without proper authorization. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2020-8195 is an information disclosure vulnerability affecting Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models. The vulnerability allows unauthorized access to sensitive information. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2020-8196 is an information disclosure vulnerability affecting Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models. The vulnerability allows unauthorized access to sensitive information. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2019-19781 is a high-severity vulnerability affecting Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models. It allows an unauthenticated attacker to execute arbitrary code on vulnerable devices. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information are provided in the input data.
CVE-2019-11634 is a remote code execution vulnerability in Citrix Workspace Application and Receiver for Windows. It arises because local drive access preferences are not properly enforced, allowing unauthorized access to client local drives. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The severity is high due to the potential for remote code execution on affected systems.
CVE-2019-13608 is an XML External Entity (XXE) processing vulnerability in Citrix StoreFront Server. This flaw allows an unauthenticated attacker to potentially retrieve sensitive information from the affected system. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
