Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-19781
HistoryDec 27, 2019 - 2:15 p.m.

CVE-2019-19781

2019-12-2714:15:12
CWE-22
[email protected]
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

Affected configurations

NVD
Node
citrixapplication_delivery_controller_firmwareMatch10.5
OR
citrixapplication_delivery_controller_firmwareMatch11.1
OR
citrixapplication_delivery_controller_firmwareMatch12.0
OR
citrixapplication_delivery_controller_firmwareMatch12.1
OR
citrixapplication_delivery_controller_firmwareMatch13.0
AND
citrixapplication_delivery_controllerMatch-
Node
citrixnetscaler_gateway_firmwareMatch10.5
OR
citrixnetscaler_gateway_firmwareMatch11.1
OR
citrixnetscaler_gateway_firmwareMatch12.0
OR
citrixnetscaler_gateway_firmwareMatch12.1
AND
citrixnetscaler_gatewayMatch-
Node
citrixgateway_firmwareMatch13.0
AND
citrixgatewayMatch-

Related

krebs 1
malwarebytes 4
cisa 4
githubexploit 42
cvelist 1
rapid7blog 2
packetstorm 5
nessus 3
thn 13
freebsd 1
zdt 3
ptsecurity 1
fireeye 5
citrix 1
metasploit 2
cisa_kev 1
qualysblog 9
cert 1
talosblog 3
impervablog 2
exploitpack 4
canvas 1
threatpost 24
checkpoint_advisories 1
symantec 1
cve 1
ics 18
prion 1
nuclei 1
attackerkb 2
exploitdb 4
kitploit 2
mssecure 2
securelist 1
avleonov 2
mmpc 1
krebs
krebs
Hackers Were Inside Citrix for Five Months
2020-02-19 15:55:04
malwarebytes
malwarebytes
Healthcare security update: death by ransomware, whatā€™s next?
2020-10-08 15:30:00
Patch now! NSA, CISA, and FBI warn of Russian intelligence exploiting 5 vulnerabilities
2021-04-16 14:59:38
Atomic research institute breached via VPN vulnerability
2021-06-21 13:53:03
cisa
cisa
Citrix Releases Security Updates for SD-WAN WANOP
2020-01-23 00:00:00
Citrix Adds SD-WAN WANOP, Updated Mitigations to CVE-2019-19781 Advisory
2020-01-17 00:00:00
CISA Releases Test for Citrix ADC and Gateway Vulnerability
2020-01-13 00:00:00
githubexploit
githubexploit
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-12 23:13:56
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-13 07:42:27
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-21 23:13:00
cvelist
cvelist
CVE-2019-19781
2019-12-27 13:06:46
rapid7blog
rapid7blog
NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler
2020-11-04 15:24:04
Defending Against the Zero Day: Analyzing Attacker Behavior Post-Exploitation of Microsoft Exchange
2021-03-23 14:04:36
packetstorm
packetstorm
Citrix Application Delivery Controller / Gateway Remote Code Execution / Traversal
2020-01-11 00:00:00
Citrix Application Delivery Controller / Gateway Remote Code Execution
2020-01-11 00:00:00
Citrix ADC (NetScaler) Directory Traversal / Remote Code Execution
2020-01-14 00:00:00
nessus
nessus
Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)
2019-12-24 00:00:00
FreeBSD : Template::Toolkit -- Directory traversal on write (2bab995f-36d4-11ea-9dad-002590acae31)
2020-01-15 00:00:00
Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027) (Direct Check)
2020-01-09 00:00:00
thn
thn
PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability
2020-01-11 10:21:00
Citrix Releases Patches for Critical ADC Vulnerability Under Active Attack
2020-01-20 14:24:00
A Patient Dies After Ransomware Attack Paralyzes German Hospital Systems
2020-09-21 10:20:00
freebsd
freebsd
Template::Toolkit -- Directory traversal on write
2019-12-13 00:00:00
zdt
zdt
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution Vulnerability (1)
2020-01-11 00:00:00
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution Exploit
2020-01-13 00:00:00
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal Exploit
2020-01-16 00:00:00
ptsecurity
ptsecurity
PT-2020-01: Arbitrary code execution in Citrix ADC
2019-05-12 00:00:00
fireeye
fireeye
Nice Try: 501 (Ransomware) Not Implemented
2020-01-24 17:00:00
404 Exploit Not Found: Vigilante Deploying Mitigation for Citrix NetScaler Vulnerability While Maintaining Backdoor
2020-01-16 00:00:00
Putting the Model to Work: Enabling Defenders With Vulnerability Intelligence ā€” Intelligence for Vulnerability Management, Part Four
2020-04-27 12:30:00
citrix
citrix
CVE-2019-19781 - Vulnerability in Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance
2019-12-17 05:00:00
metasploit
metasploit
Citrix ADC (NetScaler) Directory Traversal Scanner
2020-01-13 22:39:05
Citrix ADC (NetScaler) Directory Traversal RCE
2021-04-16 00:13:25
cisa_kev
cisa_kev
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
2021-11-03 00:00:00
qualysblog
qualysblog
Citrix ADC and Gateway Remote Code Execution Vulnerability (CVE-2019-19781)
2020-01-09 00:12:26
Nefilim Ransomware
2021-05-12 15:34:00
Solorigate/Sunburst : Theft of Cybersecurity Tools | FireEye Breach
2020-12-10 00:48:29
cert
cert
Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP web server vulnerability
2020-01-08 00:00:00
talosblog
talosblog
New Snort rules protect against recently discovered Citrix vulnerability
2020-01-15 11:41:36
Threat Source newsletter (Jan. 30, 2020)
2020-01-30 11:00:12
Threat Source newsletter (Jan. 16, 2019)
2020-01-23 07:27:43
impervablog
impervablog
Imperva Mitigates Exploits of Citrix Vulnerability ā€“ Right Out of the Box
2020-01-19 15:00:50
Australian Cyber Attack Vectors Blocked Out of the Box by Imperva WAF
2020-07-06 15:01:00
exploitpack
exploitpack
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC)
2020-01-11 00:00:00
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal
2020-01-16 00:00:00
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)
2020-01-13 00:00:00
canvas
canvas
Immunity Canvas: NETSCALER_TRAVERSAL_RCE
2019-12-27 14:15:00
threatpost
threatpost
Postmortem on U.S. Census Hack Exposes Cybersecurity Failures
2021-08-19 14:35:49
RSAC 2019: Microsoft Zero-Day Allows Exploits to Sneak Past Sandboxes
2019-03-05 11:00:03
Critical Citrix Bug Puts 80,000 Corporate LANs at Risk
2019-12-26 19:17:55
checkpoint_advisories
checkpoint_advisories
Citrix Multiple Products Directory Traversal (CVE-2019-19781)
2020-01-09 00:00:00
symantec
symantec
Multiple Citrix Products CVE-2019-19781 Remote Code Execution Vulnerability
2019-12-17 00:00:00
cve
cve
CVE-2019-19781
2019-12-27 14:15:12
ics
ics
APT Groups Target Healthcare and Essential Services
2022-01-25 12:00:00
Detecting Citrix CVE-2019-19781
2020-05-21 12:00:00
COVID-19 Exploited by Malicious Cyber Actors
2020-04-08 12:00:00
prion
prion
Directory traversal
2019-12-27 14:15:00
nuclei
nuclei
Citrix ADC and Gateway - Directory Traversal
2020-04-05 22:27:04
attackerkb
attackerkb
CVE-2019-19781
2019-11-05 00:00:00
CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability
2020-04-27 00:00:00
exploitdb
exploitdb
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC)
2020-01-11 00:00:00
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal
2020-01-16 00:00:00
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution
2020-01-11 00:00:00
kitploit
kitploit
ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
2021-12-27 20:30:00
ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
2021-12-01 20:30:00
mssecure
mssecure
Ransomware groups continue to target healthcare, critical services; hereā€™s how to reduce risk
2020-04-28 16:00:49
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself
2022-05-09 13:00:00
securelist
securelist
Incident Response Analyst Report 2019
2020-08-06 10:00:34
avleonov
avleonov
Security News: Exchange ProxyShell, Zoom RCE, Citrix Canceled PT Acknowledgments, Cisco No Patch Router RCEs
2021-08-31 23:16:51
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
mmpc
mmpc
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself
2022-05-09 13:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON
Related for NVD:CVE-2019-19781
krebs1malwarebytes4cisa4githubexploit42cvelist1rapid7blog2packetstorm5nessus3thn13freebsd1zdt3ptsecurity1fireeye5citrix1metasploit2cisa_kev1qualysblog9cert1talosblog3impervablog2exploitpack4canvas1threatpost24checkpoint_advisories1symantec1cve1ics18prion1nuclei1attackerkb2exploitdb4kitploit2mssecure2securelist1avleonov2mmpc1