CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–4 of 4 records

CVE Vendor Product Added Due Status
CVE-2019-19781 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.
Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Nov 3, 2021 May 3, 2022 Ransomware
CVE-2020-8193 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.
Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Nov 3, 2021 May 3, 2022
CVE-2020-8195 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.
Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Nov 3, 2021 May 3, 2022
CVE-2020-8196 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.
Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Nov 3, 2021 May 3, 2022