6321 matches found
Input validation
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 6 of 6...
Input validation
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 1 of 6...
Input validation
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 4 of 6...
CVE-2019-12985
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 1 of 6...
CVE-2019-12985
CVE-2019-12985 affects Citrix SD-WAN Center (10.2.x before 10.2.3) and NetScaler SD-WAN Center (10.0.x before 10.0.8). The connected Nuclei template details a remote command injection vulnerability in the DiagnosticsController ping function, caused by insufficient validation/sanitization of HTTP ...
CVE-2019-12986
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 2 of 6...
CVE-2019-12986
Citrix SD-WAN Center/NetScaler SD-WAN Center are affected by CVE-2019-12986 through an unauthenticated remote command injection in the trace_route function of DiagnosticsController. The issue arises from insufficient validation/sanitation of HTTP request parameters used to construct shell command...
CVE-2019-12987
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 3 of 6...
CVE-2019-12987
Citrix SD-WAN Center / NetScaler SD-WAN Center are affected by CVE-2019-12987 due to improper input validation in the StorageMgmtController’s apply action, where the callStoragePerl helper constructs shell commands from HTTP parameters. An attacker can route traffic through the Collector controll...
CVE-2019-12988
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 4 of 6...
CVE-2019-12988
Citrix SD-WAN Center / NetScaler SD-WAN Center CVE-2019-12988: A remote command injection exists in the addModifyZTDProxy function of NmsController. The NMS controller does not sufficiently validate or sanitize HTTP request parameters used to build a shell command. An unauthenticated attacker cou...
CVE-2019-12989
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection...
CVE-2019-12989
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection...
CVE-2019-12989
CVE-2019-12989 affects Citrix SD-WAN 10.2.x prior to 10.2.3 and NetScaler SD-WAN 10.0.x prior to 10.0.8. An unauthenticated attacker can exploit an SQL injection caused by improper input validation in specific components, potentially leading to arbitrary SQL execution against the backend database...
CVE-2019-12990
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal...
CVE-2019-12990
CVE-2019-12990 refers to a Local File Inclusion/vulnerability in Citrix SD-WAN Center and NetScaler SD-WAN Center. The Nuclei template and CNVD/Red Hat/ CIRCL entries describe an issue where the applianceSettingsFileTransfer function in ApplianceSettingsController fails to properly validate HTTP ...
CVE-2019-12991
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 5 of 6...
CVE-2019-12991
CVE-2019-12991 affects Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance: authenticated command injection in 10.2.x before 10.2.3 and 10.0.x before 10.0.8. Connected advisories confirm a remote command execution vector via the appliance’s management/UI stack and public exploits exist (e.g., ...