Citrix Gateway 12.1-64.16

CPE Details

Citrix Gateway 12.1-64.16
citrix
gateway
12.1-64.16
2023-02-01
13h11 +00:00
2023-02-01
16h56 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:citrix:gateway:12.1-64.16:*:*:*:*:*:*:*

Informations

Vendor

citrix

Product

gateway

Version

12.1-64.16

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-24487 2023-07-10 20h51 +00:00 Arbitrary file read in Citrix ADC and Citrix Gateway 
7.5
High
CVE-2023-24488 2023-07-10 20h41 +00:00 Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting
6.1
Medium
CVE-2022-27507 2023-01-24 00h00 +00:00 Authenticated denial of service
6.5
Medium
CVE-2022-27508 2023-01-24 00h00 +00:00 Unauthenticated denial of service
7.5
High
CVE-2019-18177 2022-12-26 00h00 +00:00 In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.
6.5
Medium
CVE-2022-27516 2022-11-08 21h26 +00:00 User login brute force protection functionality bypass
9.8
Critical
CVE-2022-27510 2022-11-08 21h26 +00:00 Unauthorized access to Gateway user capabilities
9.8
Critical
CVE-2022-27513 2022-11-08 21h26 +00:00 Remote desktop takeover via phishing
9.6
Critical
CVE-2022-27509 2022-07-28 13h11 +00:00 Unauthenticated redirection to a malicious website
6.1
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.