CVE-2022-27505

Citrix SD-WAN is affected by CVE-2022-27505 (Reflected XSS). The issue affects Citrix SD-WAN Standard/Premium Edition Appliance, with exploitation requiring a valid active session on the vulnerable device. Affected versions are before 11.4.3a. The root cause is improper input validation/filtering...

CVE-2022-27506

CVE-2022-27506 is a hard-coded credentials flaw that allows administrators to access the SD-WAN shell via the CLI. The issue affects Citrix SD-WAN Center Management Console (before 11.4.3), Citrix SD-WAN Standard/Premium Edition Appliance (before 11.4.1), and Citrix SD-WAN Orchestrator for On-Pre...

CVE-2024-2049

Summary: CVE-2024-2049 is a SSRF vulnerability in Citrix SD-WAN Standard/Premium Editions (11.4.0–11.4.4.46). The issue allows an attacker to disclose limited information from the appliance via access to the management IP. Affected products/versions: Citrix SD-WAN Standard/Premium Editions on or ...