📦

gateway

Vendor: citrix

Login to add this product to WatchStack
Actively Exploited 2 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 1 Remote Access
Total CVEs 35 Total Indexed
Avg. EPSS 9.19% Exploit Prob.
Latest CVE CVE-2023-24488 Jul 10

Security Vulnerability Index

Page 1 / 4
6.1 CVSS
CVE-2023-24488

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting

EPSS: 80.91%
6.3 CVSS
CVE-2023-24487

Arbitrary file read in Citrix ADC and Citrix Gateway 

EPSS: 1.07%
7.5 CVSS
CVE-2022-27508

Unauthenticated denial of service

EPSS: 1.02%
6.5 CVSS
CVE-2022-27507

Authenticated denial of service

EPSS: 0.99%
6.5 CVSS
CVE-2019-18177

In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.

EPSS: 0.58%
9.8 CVSS
CVE-2022-27518
Exploit Found

Unauthenticated remote arbitrary code execution

EPSS: 6.88%
5.3 CVSS
CVE-2022-27516

User login brute force protection functionality bypass

EPSS: 0.64%
8.3 CVSS
CVE-2022-27513

Remote desktop takeover via phishing

EPSS: 0.29%
9.8 CVSS
CVE-2022-27510

Unauthorized access to Gateway user capabilities

EPSS: 1.07%
6.1 CVSS
CVE-2022-27509

Unauthenticated redirection to a malicious website

EPSS: 0.49%