Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2023-4966
HistoryOct 10, 2023 - 2:15 p.m.

CVE-2023-4966

2023-10-1014:15:10
NVD-CWE-noinfo
CWE-119
[email protected]
web.nvd.nist.gov
392
In Wild
94
cve-2023-4966
sensitive information disclosure
netscaler adc
netscaler gateway
vpn
ica proxy
cvpn
rdp proxy
aaa virtual server

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.967 High

EPSS

Percentile

99.6%

JSON

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

CPENameOperatorVersion
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllerlt12.1-55.300
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllereq12.1
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllereq12.1-55.297
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllerlt13.0-92.19
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllereq13.0-91.13
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllereq13.0
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllerlt13.1-37.164
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllereq13.1-37.159
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllereq13.1
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllerlt13.1-49.15
Rows per page:
1-10 of 211

Social References

More

Related

thn 4
hackread 1
githubexploit 9
malwarebytes 2
hivepro 1
attackerkb 1
metasploit 1
prion 1
talosblog 2
cisa_kev 1
rapid7blog 2
nuclei 1
nessus 1
citrix 1
ics 1
avleonov 1
thn
thn
Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms
2023-10-18 12:27:00
LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In
2023-11-22 04:49:00
Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities
2023-10-25 04:47:00
hackread
hackread
Mandiant Tracks Four Uncategorized Groups Exploiting Citrix Vulnerability
2023-11-01 22:14:45
githubexploit
githubexploit
Exploit for Vulnerability in Citrix Netscaler Application Delivery Controller
2023-12-08 10:28:15
Exploit for Vulnerability in Citrix Netscaler Application Delivery Controller
2023-10-27 11:00:09
Exploit for Vulnerability in Citrix Netscaler Application Delivery Controller
2023-10-25 07:17:54
malwarebytes
malwarebytes
Citrix Bleed widely exploited, warn government agencies
2023-11-24 19:20:11
Ransomware review: December 2023
2023-12-13 19:22:12
hivepro
hivepro
A Longstanding Zero-Day in Citrix Devices Exploited Since August
2023-10-20 12:47:00
attackerkb
attackerkb
CVE-2023-4966
2023-10-10 00:00:00
metasploit
metasploit
Citrix ADC (NetScaler) Bleed Scanner
2023-10-26 13:15:03
prion
prion
Information disclosure
2023-10-10 14:15:00
talosblog
talosblog
You’d be surprised to know what devices are still using Windows CE
2023-11-02 18:00:23
IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the most-targeted sectors
2024-01-24 13:00:04
cisa_kev
cisa_kev
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
2023-10-18 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-11-03 19:10:16
CVE-2023-4966: Exploitation of Citrix NetScaler Information Disclosure Vulnerability
2023-10-25 18:18:15
nuclei
nuclei
Citrix Bleed - Leaking Session Tokens
2023-10-24 10:58:04
nessus
nessus
NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX579459)
2023-10-13 00:00:00
citrix
citrix
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2023-4966 and CVE-2023-4967
2023-10-10 12:07:11
ics
ics
#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability
2023-11-21 12:00:00
avleonov
avleonov
October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture
2023-11-05 18:39:59

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.967 High

EPSS

Percentile

99.6%

JSON
Related for CVE-2023-4966
thn4hackread1githubexploit9malwarebytes2hivepro1attackerkb1metasploit1prion1talosblog2cisa_kev1rapid7blog2nuclei1nessus1citrix1ics1avleonov1