[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feDQsNMxcgI9QGphMQ12A1B1TF8M5xghGqlXVLjYA4oo":3,"g5a-family:citrix\u002Fnetscaler_gateway":264,"g5a-ex:citrix\u002Fnetscaler_gateway@*":272},{"success":4,"data":5},true,{"product":6,"versions":98,"topVulnerabilitiesByEpss":139,"kevVulnerabilities":196,"seoMetadata":242,"meta":261},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":97},"citrix","netscaler_gateway",40,39,11,"2025-08-26",[14,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"11.0",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"11.1",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"11.1-65.20",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"11.1-65.22",{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},"12.0",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"12.1",{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-58.15",{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},"13.0",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-91.13",{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-92.19",{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-92.21",{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-92.31",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"13.1",{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-49.13",{"version":46,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-49.15",{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-51.15",{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-52.19",{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-53.17",{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-53.24",{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-54.29",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-55.34",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-56.18",{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-57.26",{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-58.32",{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-59.19",{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-59.22",{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"14.1",{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-12.35",{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-17.38",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-21.57",{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-25.53",{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-25.56",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-29.72",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-34.42",{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-38.53",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-43.56",{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-4.42",{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-47.46",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-47.48",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-8.50","Netscaler Gateway by Citrix is a technology product with 40 tracked versions and 39 known security vulnerabilities including 11 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},{"version":46,"cve_count":17,"kev_count":17,"has_kev":18},{"version":48,"cve_count":17,"kev_count":17,"has_kev":18},{"version":50,"cve_count":17,"kev_count":17,"has_kev":18},{"version":52,"cve_count":17,"kev_count":17,"has_kev":18},{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},{"version":64,"cve_count":17,"kev_count":17,"has_kev":18},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},[140,148,153,160,165,172,178,182,187,192],{"cveId":141,"description":142,"publishedDate":143,"cvssScore":144,"cvssVersion":145,"severity":146,"isKev":4,"epssScore":147},"CVE-2023-4966","Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.","2023-10-10",9.4,"v3.1","Critical",0.99999,{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"cvssVersion":145,"severity":146,"isKev":4,"epssScore":147},"CVE-2019-19781","An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.","2019-12-27",9.8,{"cveId":154,"description":155,"publishedDate":156,"cvssScore":157,"cvssVersion":145,"severity":158,"isKev":4,"epssScore":159},"CVE-2025-5777","Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server","2025-06-17",7.5,"High",0.99897,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":152,"cvssVersion":145,"severity":146,"isKev":4,"epssScore":164},"CVE-2023-3519","Unauthenticated remote code execution","2023-07-19",0.99445,{"cveId":166,"description":167,"publishedDate":168,"cvssScore":169,"cvssVersion":145,"severity":170,"isKev":4,"epssScore":171},"CVE-2020-8193","Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.","2020-07-10",6.5,"Medium",0.88411,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":176,"cvssVersion":145,"severity":158,"isKev":4,"epssScore":177},"CVE-2023-6549","Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read\n","2024-01-17",8.2,0.57633,{"cveId":179,"description":180,"publishedDate":168,"cvssScore":169,"cvssVersion":145,"severity":170,"isKev":4,"epssScore":181},"CVE-2020-8195","Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.",0.33263,{"cveId":183,"description":184,"publishedDate":168,"cvssScore":185,"cvssVersion":145,"severity":170,"isKev":4,"epssScore":186},"CVE-2020-8196","Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.",4.3,0.26333,{"cveId":188,"description":189,"publishedDate":168,"cvssScore":190,"cvssVersion":145,"severity":170,"isKev":18,"epssScore":191},"CVE-2020-8191","Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting (XSS).",6.1,0.22941,{"cveId":193,"description":194,"publishedDate":12,"cvssScore":152,"cvssVersion":145,"severity":146,"isKev":4,"epssScore":195},"CVE-2025-7775","Memory overflow vulnerability leading to Remote Code Execution and\u002For Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX",0.18973,[197,201,205,213,221,224,228,230,235,238,239],{"cveId":193,"description":194,"publishedDate":12,"cvssScore":152,"severity":146,"isKev":4,"epssScore":195,"cisaVulnName":198,"cisaDateAdded":12,"cisaShortDescription":199,"cisaRequiredAction":200},"Citrix NetScaler Memory Overflow Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and\u002For denial of service.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":154,"description":155,"publishedDate":156,"cvssScore":157,"severity":158,"isKev":4,"epssScore":159,"cisaVulnName":202,"cisaDateAdded":203,"cisaShortDescription":204,"cisaRequiredAction":200},"Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","2025-07-10","Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.",{"cveId":206,"description":207,"publishedDate":208,"cvssScore":152,"severity":146,"isKev":4,"epssScore":209,"cisaVulnName":210,"cisaDateAdded":211,"cisaShortDescription":212,"cisaRequiredAction":200},"CVE-2025-6543","Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server","2025-06-25",0.09756,"Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","2025-06-30","Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.",{"cveId":214,"description":215,"publishedDate":175,"cvssScore":216,"severity":170,"isKev":4,"epssScore":217,"cisaVulnName":218,"cisaDateAdded":175,"cisaShortDescription":219,"cisaRequiredAction":220},"CVE-2023-6548","Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.",5.5,0.03191,"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":173,"description":174,"publishedDate":175,"cvssScore":176,"severity":158,"isKev":4,"epssScore":177,"cisaVulnName":222,"cisaDateAdded":175,"cisaShortDescription":223,"cisaRequiredAction":220},"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.",{"cveId":141,"description":142,"publishedDate":143,"cvssScore":144,"severity":146,"isKev":4,"epssScore":147,"cisaVulnName":222,"cisaDateAdded":225,"cisaShortDescription":226,"cisaRequiredAction":227},"2023-10-18","Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.","Apply mitigations and kill all active and persistent sessions per vendor instructions [https:\u002F\u002Fwww.netscaler.com\u002Fblog\u002Fnews\u002Fcve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway\u002F] OR discontinue use of the product if mitigations are unavailable.",{"cveId":161,"description":162,"publishedDate":163,"cvssScore":152,"severity":146,"isKev":4,"epssScore":164,"cisaVulnName":218,"cisaDateAdded":163,"cisaShortDescription":229,"cisaRequiredAction":220},"Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.",{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"severity":146,"isKev":4,"epssScore":147,"cisaVulnName":231,"cisaDateAdded":232,"cisaShortDescription":233,"cisaRequiredAction":234},"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","2021-11-03","Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.","Apply updates per vendor instructions.",{"cveId":183,"description":184,"publishedDate":168,"cvssScore":185,"severity":170,"isKev":4,"epssScore":186,"cisaVulnName":236,"cisaDateAdded":232,"cisaShortDescription":237,"cisaRequiredAction":234},"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.",{"cveId":179,"description":180,"publishedDate":168,"cvssScore":169,"severity":170,"isKev":4,"epssScore":181,"cisaVulnName":236,"cisaDateAdded":232,"cisaShortDescription":237,"cisaRequiredAction":234},{"cveId":166,"description":167,"publishedDate":168,"cvssScore":169,"severity":170,"isKev":4,"epssScore":171,"cisaVulnName":240,"cisaDateAdded":232,"cisaShortDescription":241,"cisaRequiredAction":234},"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.",{"title":243,"metaDescription":244,"keywords":245,"structuredData":246},"Netscaler Gateway by Citrix - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Netscaler Gateway by Citrix covering 40 versions with 39 tracked vulnerabilities including 5 critical and 2 high-severity issues and 11 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Netscaler Gateway vulnerabilities, Netscaler Gateway security, Netscaler Gateway CVE, Citrix Netscaler Gateway, Netscaler Gateway threat intelligence, Citrix security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Netscaler Gateway KEV, Netscaler Gateway exploited vulnerabilities",{"@context":247,"@type":248,"name":249,"description":244,"url":250,"manufacturer":251,"applicationCategory":255,"softwareVersion":256,"mainEntity":257},"https:\u002F\u002Fschema.org","SoftwareApplication","Netscaler Gateway","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcitrix\u002Fnetscaler_gateway",{"@type":252,"name":253,"url":254},"Organization","Citrix","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcitrix","Security Software","40 versions tracked",{"@type":258,"name":259,"description":260,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Netscaler Gateway Security Vulnerabilities","Security vulnerabilities affecting Netscaler Gateway by Citrix",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":262,"apiVersion":263},"2026-10-28T16:47:07.252Z","3.0",[265,268,270],{"product":266,"cves":267},"netscaler_gateway_firmware",31,{"product":269,"cves":16},"netscaler_gateway_11.0",{"product":271,"cves":16},"netscaler_gateway_11.0_firmware",{"rows":273,"total":11,"capped":18,"failed":17},[274,280,286,292,299,303,310,316,320,324,328],{"cveId":193,"name":198,"severity":146,"cvss":152,"added":12,"epss":195,"published":275,"ranges":276,"checked":4,"hits":279,"covers":18},"2025-08-26T13:15:32.87",[277,278],"13.1 to before 13.1-59.22","14.1 to before 14.1-47.48",[],{"cveId":154,"name":202,"severity":158,"cvss":157,"added":203,"epss":159,"published":281,"ranges":282,"checked":4,"hits":285,"covers":18},"2025-06-17T13:15:21.523",[283,284],"13.1 to before 13.1-58.32","14.1 to before 14.1-43.56",[],{"cveId":206,"name":210,"severity":146,"cvss":152,"added":211,"epss":209,"published":287,"ranges":288,"checked":4,"hits":291,"covers":18},"2025-06-25T13:15:27.293",[289,290],"13.1 to before 13.1-59.19","14.1 to before 14.1-47.46",[],{"cveId":214,"name":218,"severity":170,"cvss":216,"added":175,"epss":217,"published":293,"ranges":294,"checked":4,"hits":298,"covers":18},"2024-01-17T20:15:50.627",[295,296,297],"13.0 to before 13.0-92.21","13.1 to before 13.1-51.15","14.1 to before 14.1-12.35",[],{"cveId":173,"name":222,"severity":158,"cvss":176,"added":175,"epss":177,"published":300,"ranges":301,"checked":4,"hits":302,"covers":18},"2024-01-17T21:15:11.69",[295,296,297],[],{"cveId":141,"name":222,"severity":146,"cvss":144,"added":225,"epss":147,"published":304,"ranges":305,"checked":4,"hits":309,"covers":18},"2023-10-10T14:15:10.977",[306,307,308],"13.0 to before 13.0-92.19","13.1 to before 13.1-49.15","14.1 to before 14.1-8.50",[],{"cveId":161,"name":218,"severity":146,"cvss":152,"added":163,"epss":164,"published":311,"ranges":312,"checked":4,"hits":315,"covers":18},"2023-07-19T18:15:11.513",[313,314],"13.0 to before 13.0-91.13","13.1 to before 13.1-49.13",[],{"cveId":149,"name":231,"severity":146,"cvss":152,"added":232,"epss":147,"published":317,"ranges":318,"checked":4,"hits":319,"covers":18},"2019-12-27T14:15:12.07",[],[],{"cveId":183,"name":236,"severity":170,"cvss":185,"added":232,"epss":186,"published":321,"ranges":322,"checked":4,"hits":323,"covers":18},"2020-07-10T16:15:12.407",[],[],{"cveId":179,"name":236,"severity":170,"cvss":169,"added":232,"epss":181,"published":325,"ranges":326,"checked":4,"hits":327,"covers":18},"2020-07-10T16:15:12.327",[],[],{"cveId":166,"name":240,"severity":170,"cvss":169,"added":232,"epss":171,"published":329,"ranges":330,"checked":4,"hits":331,"covers":18},"2020-07-10T16:15:12.157",[],[]]