CVE-2019-12989

🗓️ 16 Jul 2019 17:32:44Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 1178 Views

Citrix/NetScaler SD-WAN SQL Injection CVE-2019-1298

Reporter	Title	Published	Views	Family All 20
0day.today	Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass / Remote Command Execution Exploit	12 Jul 201900:00	–	zdt
ATTACKERKB	CVE-2019-12989	16 Jul 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the delivery interface component in NetScaler SD-WAN and Citrix SD-WAN software management tools allows attackers to enhance their privileges.	21 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the control interface for delivering web applications in NetScaler SD-WAN and the software-based network management solution in Citrix SD-WAN allows attackers to execute arbitrary SQL queries.	1 Mar 202300:00	–	bdu_fstec
Circl	CVE-2019-12989	12 Jul 201900:00	–	circl
CISA KEV Catalog	Citrix SD-WAN and NetScaler SQL Injection Vulnerability	25 Mar 202200:00	–	cisa_kev
Tenable Nessus	Citrix SD-WAN Appliance < 10.2.3 Unauthenticated Blind SQL Injection	3 Jul 201900:00	–	nessus
Check Point Advisories	Citrix SD-WAN SQL Injection (CVE-2019-12989)	3 Apr 202200:00	–	checkpoint_advisories
Citrix	Citrix SD-WAN Multiple Security Updates	9 Nov 202000:00	–	citrix
Cvelist	CVE-2019-12989	16 Jul 201917:32	–	cvelist

NVD

Node

citrix netscaler_sd-wanRange10.0.0–10.0.8

OR

citrix sd-wanRange10.2.0–10.2.3

Source	Link
securityfocus	www.securityfocus.com/bid/109133
support	www.support.citrix.com/article/CTX251987
packetstormsecurity	www.packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html
tenable	www.tenable.com/security/research/tra-2019-32
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 02:15Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.19.8

EPSS0.94352

SSVC

citrix netscaler sd-wan sql injection cve-2019-12989 nvd