CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actor...

citrix.geant.org Cross Site Scripting vulnerability OBB-3530126

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway

Citrix is alerting users of a critical security flaw in NetScaler Application Delivery Controller ADC and Gateway that it said is being actively exploited in the wild. Tracked as CVE-2023-3519 CVSS score: 9.8, the issue relates to a case of code injection that could result in unauthenticated remo...

Citrix ADC 和 Citrix Gateway 安全漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution...

Citrix ADC 和 Citrix Gateway 代码注入漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) stems from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Citrix ADC application delivery controllers formerly Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly Citrix NetScaler Gateway, is related to insufficient validation of input data. Exploiting this vulnerability...

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) stems from insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly known as Citrix NetScaler Gateway, is related to insecure management of privileges. Exploiting this...

CVE-2023-3519

Unauthenticated remote code execution Recent assessments: rbowes-r7 at July 19, 2023 9:42pm UTC reported: Note that the analysis before is for a separate issue – either a silently-patched vuln or some cleanup. We’ve posted a Rapid7 Analysis with the full details, so check that out! I spent some...

Citrix ADC 和 Citrix Gateway 跨站脚本漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) stems from improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway access control system formerly Citrix NetScaler Gateway is related to improper code generation. Exploiting this vulnerability allows a malicious act...

Critical Zero-Day Vulnerability in Citrix NetScaler ADC and NetScaler Gateway

On Tuesday, July 18, Citrix published a security bulletin warning users of three new vulnerabilities affecting NetScaler ADC and NetScaler Gateway. Of the three vulnerabilities, CVE-2023-3519 is the most severe—successful exploitation allows unauthenticated attackers to execute code remotely on...

CVE-2023-3467

creationtimestamp| type| source ---|---|--- 2023-07-18 13:18:11+00:00| seen| https://www.cert.at/de/warnungen/2023/7/sicherheitslucken-teil-kritisch-in-citrixnetscaler-adc-und-gateway-updates-verfugbar 2023-07-19 06:17:05+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus11/2023...

CVE-2023-3466

creationtimestamp| type| source ---|---|--- 2023-07-18 13:18:11+00:00| seen| https://www.cert.at/de/warnungen/2023/7/sicherheitslucken-teil-kritisch-in-citrixnetscaler-adc-und-gateway-updates-verfugbar 2023-07-19 06:17:05+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus11/2023...

Citrix Releases Security Updates for NetScaler ADC and Gateway

Citrix has released security updates to address vulnerabilities CVE-2023-3519, CVE-2023-3466, and CVE-2023-3467 affecting NetScaler ADC and NetScaler Gatewaylink is external. An attacker can exploit one of these vulnerabilities to take control of an affected system. According to Citrix,...

PT-2023-3576 · Citrix · Citrix Netscaler Application Delivery Controller +2

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler Application Delivery Controller versions prior to 12.1-55.297 Citrix NetScaler Application Delivery Controller versions prior to 13.0-91.13 Citrix NetScaler Application Delivery Controller versions prior to 13.1-37.159 Citrix...

PT-2023-3575

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC affected versions not specified Citrix NetScaler Gateway affected versions not specified Description An issue in Citrix NetScaler ADC and NetScaler Gateway involves incorrect code generation management, leading to...

VulnCheck KEV: CVE-2023-3519

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution...

Vulnerabilities fixed in Citrix ADC and Citrix Gateway

Citrix has fixed vulnerabilities in NetScaler ADC and NetScaler Gateway. A malicious party could exploit the vulnerabilities to execute a cross-site scripting attack, obtain elevated privileges or execute arbitrary code. Citrix reports that the vulnerability with attribute CVE-2023-3519 is being...

PT-2023-3577 · Citrix · Citrix Netscaler Application Delivery Controller +2

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler Application Delivery Controller versions prior to 12.1-55.297 Citrix NetScaler Application Delivery Controller versions prior to 13.0-91.13 Citrix NetScaler Application Delivery Controller versions prior to 13.1-37.159 Citrix...