Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:citrix_adc,_citrix_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductCitrix Adc, Citrix Gateway (59291d85-2b8a-5aac-ac30-d81de1feff2b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22955 vulnerable 2026-06-08 05:30:02.019143 Details available
A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication.
Published: 2021-12-07T13:12:33.000Z
Updated: 2024-08-03T18:58:25.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22927 vulnerable 2026-06-08 05:30:01.943441 Details available
A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.
Published: 2021-08-05T20:16:42.000Z
Updated: 2024-08-03T18:58:26.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22920 vulnerable 2026-06-08 05:30:01.878487 Details available
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a SAML authentication hijack to steal a valid user session.
Published: 2021-08-05T20:16:49.000Z
Updated: 2024-08-03T18:58:25.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8300 vulnerable 2026-06-08 05:27:15.580833 Details available
Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.
Published: 2021-06-16T13:08:16.000Z
Updated: 2024-08-04T09:56:28.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8245 vulnerable 2026-06-08 05:27:15.405724 Details available
Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b leads to an HTML Injection attack against the SSL VPN web portal.
Published: 2020-09-18T20:12:07.000Z
Updated: 2024-08-04T09:56:27.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8197 vulnerable 2026-06-08 05:27:15.156446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8190 vulnerable 2026-06-08 05:27:15.132663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8187 vulnerable 2026-06-08 05:27:15.120089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.