297 matches found
CVE-2023-24487 Arbitrary file read
Arbitrary file read in Citrix ADC and Citrix Gateway...
CVE-2023-24488 Cross site scripting
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting...
CVE-2023-24488 Cross site scripting
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting...
CVE-2023-24488
CVE-2023-24488 is a cross-site scripting vulnerability affecting Citrix ADC and Citrix Gateway. Public data show that versions before 13.1 and the listed sub-versions (13.1-45.61, 13.0-90.11, 12.1-65.35) contain a flaw due to improper input/URL parameter validation that can cause script execution...
Vulnerabilities fixed in Citrix ADC and Gateway
Citrix has fixed vulnerabilities in ADC and Gateway. A malicious party could exploit the vulnerabilities to gain access to system data, or to perform a cross-site scripting attack. Such an attack could result in execution of code in the victim's browser. To access system data, the malicious party...
PT-2023-3753
Name of the Vulnerable Software and Affected Versions Citrix ADC and Citrix Gateway affected versions not specified Description The issue is related to an arbitrary file read in Citrix ADC and Citrix Gateway, previously known as Citrix NetScaler Application Delivery Controller and Citrix NetScale...
PT-2023-3754 · Citrix · Citrix Adc +1
Name of the Vulnerable Software and Affected Versions: Citrix ADC and Citrix Gateway affected versions not specified Description: The issue is related to a cross-site scripting vulnerability in Citrix ADC and Citrix Gateway. This vulnerability exists due to inadequate protection of the web page...
Unable to provision VPX on the SDX 9100/16000 SDX 16000 hardware
Unable to provision VPX on the SDX 9100/16000 hardware. Receive error while provisioning:Booting a02co1vdivpx001 Error: Citrix ADC is not reachable after reboot Operation Failed : Error: Citrix ADC is not reachable after reboot...
How to customize the error message generated by Citrix ADC in nFactor system
Customize the error message generated by Citrix ADC in nFactor system...
How to increase space on Citrix ADC VPX instance
How to increase space on Citrix ADC VPX instance?...
Upgraded Citrix ADC from 12.1 to 13.0. MFA now giving extra field.
We just upgraded our secondary Netscaler to version 13.0-89.7 firmware. The issue we are having is an extra field appeared on the Imprivata ID 2-Factor page that was not there before. We hadn't upgraded the Primary, yet since this was an issue. Not having this issue on 12.1. Do we need to set up...
Citrix ADC: 13.1: error message for smart card access to gateway
Citrix ADC: 13.1: error message for smart card access to the gateway...
The Bug Report December 2022 Edition
The Bug Report — December 2022 Edition By Trellix · January 4, 2023 This story was also written by John Borrero Rodriguez Everyone gets it Why am I here? Ho Ho Ho! Welcome back to the Bug Report, or a more fitting name for this time of year: The NAUGHTY List! Yes, we checked it twice. It is no...
The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller), as well as Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway), stems from insufficient verification of data authenticity. This allows attackers to gain access to servers configured in RDP proxy mode.
The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway is related to insufficient data authentication checks. Exploiting this...
CVE-2019-18177
In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update...
[NetScaler] SDX reports "Appliance is running in grace" Error
SDX has instance license CNSINSTCCS checked from ADM. And SDX may report error "Appliance is running in grace. System will loose capacity after XYZ hours"...
Citrix ADC and Gateway Zero-Day Vulnerability Exploited by APT5
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Patch Tuesday for December tackles two zero-day vulnerabilities, one of which is being actively exploited CVE-2022-44698 and another that was publicly disclosed at the time of release CVE-2022-44710, alo...
Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability
The U.S. National Security Agency NSA on Tuesday said a threat actor tracked as APT5 has been actively exploiting a zero-day flaw in Citrix Application Delivery Controller ADC and Gateway to take over affected systems. The critical remote code execution vulnerability, identified as CVE-2022-27518...
CVE-2022-27518 exploited in the wild by APT5: everything you need to know
Detect and mitigate CVE-2022-27518, a Citrix ADC and Gateway unauthenticated RCE 0-day exploited in the wild by a nation state actor. Organizations should patch urgently...
