Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2019-19781
HistoryDec 27, 2019 - 2:15 p.m.

CVE-2019-19781

2019-12-2714:15:00
CWE-22
[email protected]
web.nvd.nist.gov
2126
In Wild
75
citrix
adc
gateway
directory traversal
vulnerability
cve-2019-19781

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

CPENameOperatorVersion
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwareeq10.5
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwareeq11.1
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwareeq12.0
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwareeq12.1
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwareeq13.0
citrix:netscaler_gateway_firmwarecitrix netscaler gateway firmwareeq10.5
citrix:netscaler_gateway_firmwarecitrix netscaler gateway firmwareeq11.1
citrix:netscaler_gateway_firmwarecitrix netscaler gateway firmwareeq12.0
citrix:netscaler_gateway_firmwarecitrix netscaler gateway firmwareeq12.1
citrix:gateway_firmwarecitrix gateway firmwareeq13.0

Social References

More

Related

githubexploit 42
cisa 4
exploitpack 4
attackerkb 2
thn 13
packetstorm 5
ics 18
rapid7blog 2
malwarebytes 4
krebs 1
zdt 3
nessus 3
symantec 1
prion 1
nuclei 1
checkpoint_advisories 1
fireeye 5
canvas 1
talosblog 3
impervablog 2
metasploit 2
threatpost 24
cert 1
ptsecurity 1
citrix 1
cisa_kev 1
freebsd 1
qualysblog 9
exploitdb 4
kitploit 2
mssecure 2
securelist 1
avleonov 2
mmpc 1
githubexploit
githubexploit
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-16 12:33:00
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-11 03:10:12
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-16 10:09:05
cisa
cisa
CISA Releases Test for Citrix ADC and Gateway Vulnerability
2020-01-13 00:00:00
Citrix Releases Security Updates for SD-WAN WANOP
2020-01-23 00:00:00
Citrix Adds SD-WAN WANOP, Updated Mitigations to CVE-2019-19781 Advisory
2020-01-17 00:00:00
exploitpack
exploitpack
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution
2020-01-11 00:00:00
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal
2020-01-16 00:00:00
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)
2020-01-13 00:00:00
attackerkb
attackerkb
CVE-2019-19781
2019-11-05 00:00:00
CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability
2020-04-27 00:00:00
thn
thn
A Patient Dies After Ransomware Attack Paralyzes German Hospital Systems
2020-09-21 10:20:00
PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability
2020-01-11 10:21:00
Citrix Releases Patches for Critical ADC Vulnerability Under Active Attack
2020-01-20 14:24:00
packetstorm
packetstorm
Citrix Application Delivery Controller / Gateway 10.5 Remote Code Execution
2020-01-13 00:00:00
Citrix ADC / Gateway Path Traversal
2020-01-16 00:00:00
Citrix Application Delivery Controller / Gateway Remote Code Execution / Traversal
2020-01-11 00:00:00
ics
ics
Critical Vulnerability in Citrix Application Delivery Controller, Gateway, and SD-WAN WANOP
2020-05-21 12:00:00
Russian Foreign Intelligence Service (SVR) Cyber Operations: Trends and Best Practices for Network Defenders
2021-04-26 12:00:00
COVID-19 Exploited by Malicious Cyber Actors
2020-04-08 12:00:00
rapid7blog
rapid7blog
NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler
2020-11-04 15:24:04
Defending Against the Zero Day: Analyzing Attacker Behavior Post-Exploitation of Microsoft Exchange
2021-03-23 14:04:36
malwarebytes
malwarebytes
Healthcare security update: death by ransomware, what’s next?
2020-10-08 15:30:00
Atomic research institute breached via VPN vulnerability
2021-06-21 13:53:03
Patch now! NSA, CISA, and FBI warn of Russian intelligence exploiting 5 vulnerabilities
2021-04-16 14:59:38
krebs
krebs
Hackers Were Inside Citrix for Five Months
2020-02-19 15:55:04
zdt
zdt
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal Exploit
2020-01-16 00:00:00
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution Exploit
2020-01-13 00:00:00
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution Vulnerability (1)
2020-01-11 00:00:00
nessus
nessus
Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027) (Direct Check)
2020-01-09 00:00:00
FreeBSD : Template::Toolkit -- Directory traversal on write (2bab995f-36d4-11ea-9dad-002590acae31)
2020-01-15 00:00:00
Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)
2019-12-24 00:00:00
symantec
symantec
Multiple Citrix Products CVE-2019-19781 Remote Code Execution Vulnerability
2019-12-17 00:00:00
prion
prion
Directory traversal
2019-12-27 14:15:00
nuclei
nuclei
Citrix ADC and Gateway - Directory Traversal
2020-04-05 22:27:04
checkpoint_advisories
checkpoint_advisories
Citrix Multiple Products Directory Traversal (CVE-2019-19781)
2020-01-09 00:00:00
fireeye
fireeye
404 Exploit Not Found: Vigilante Deploying Mitigation for Citrix NetScaler Vulnerability While Maintaining Backdoor
2020-01-16 00:00:00
Nice Try: 501 (Ransomware) Not Implemented
2020-01-24 17:00:00
Putting the Model to Work: Enabling Defenders With Vulnerability Intelligence — Intelligence for Vulnerability Management, Part Four
2020-04-27 12:30:00
canvas
canvas
Immunity Canvas: NETSCALER_TRAVERSAL_RCE
2019-12-27 14:15:00
talosblog
talosblog
Threat Source newsletter (Jan. 30, 2020)
2020-01-30 11:00:12
New Snort rules protect against recently discovered Citrix vulnerability
2020-01-15 11:41:36
Threat Source newsletter (Jan. 16, 2019)
2020-01-23 07:27:43
impervablog
impervablog
Imperva Mitigates Exploits of Citrix Vulnerability – Right Out of the Box
2020-01-19 15:00:50
Australian Cyber Attack Vectors Blocked Out of the Box by Imperva WAF
2020-07-06 15:01:00
metasploit
metasploit
Citrix ADC (NetScaler) Directory Traversal RCE
2021-04-16 00:13:25
Citrix ADC (NetScaler) Directory Traversal Scanner
2020-01-13 22:39:05
threatpost
threatpost
Postmortem on U.S. Census Hack Exposes Cybersecurity Failures
2021-08-19 14:35:49
RSAC 2019: Microsoft Zero-Day Allows Exploits to Sneak Past Sandboxes
2019-03-05 11:00:03
Citrix Accelerates Patch Rollout For Critical RCE Flaw
2020-01-21 17:19:28
cert
cert
Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP web server vulnerability
2020-01-08 00:00:00
ptsecurity
ptsecurity
PT-2020-01: Arbitrary code execution in Citrix ADC
2019-05-12 00:00:00
citrix
citrix
CVE-2019-19781 - Vulnerability in Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance
2019-12-17 05:00:00
cisa_kev
cisa_kev
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
2021-11-03 00:00:00
freebsd
freebsd
Template::Toolkit -- Directory traversal on write
2019-12-13 00:00:00
qualysblog
qualysblog
Citrix ADC and Gateway Remote Code Execution Vulnerability (CVE-2019-19781)
2020-01-09 00:12:26
Nefilim Ransomware
2021-05-12 15:34:00
Solorigate/Sunburst : Theft of Cybersecurity Tools | FireEye Breach
2020-12-10 00:48:29
exploitdb
exploitdb
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC)
2020-01-11 00:00:00
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)
2020-01-13 00:00:00
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution
2020-01-11 00:00:00
kitploit
kitploit
ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
2021-12-01 20:30:00
ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
2021-12-27 20:30:00
mssecure
mssecure
Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk
2020-04-28 16:00:49
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself
2022-05-09 13:00:00
securelist
securelist
Incident Response Analyst Report 2019
2020-08-06 10:00:34
avleonov
avleonov
Security News: Exchange ProxyShell, Zoom RCE, Citrix Canceled PT Acknowledgments, Cisco No Patch Router RCEs
2021-08-31 23:16:51
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
mmpc
mmpc
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself
2022-05-09 13:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON
Related for CVE-2019-19781
githubexploit42cisa4exploitpack4attackerkb2thn13packetstorm5ics18rapid7blog2malwarebytes4krebs1zdt3nessus3symantec1prion1nuclei1checkpoint_advisories1fireeye5canvas1talosblog3impervablog2metasploit2threatpost24cert1ptsecurity1citrix1cisa_kev1freebsd1qualysblog9exploitdb4kitploit2mssecure2securelist1avleonov2mmpc1