Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-12989

98
FAUCET Score

CVE-2019-12989 is a critical SQL Injection vulnerability affecting Citrix SD-WAN versions 10.2.x before 10.2.3 and NetScaler SD-WAN versions 10.0.x before 10.0.8. With a CVSS score of 9.8, this vulnerability allows unauthenticated remote attackers to achieve full compromise of affected systems, including confidentiality, integrity, and availability. This flaw is actively exploited in the wild, with public exploit code available, including an ExploitDB entry demonstrating authentication bypass and remote command execution. The vulnerability has garnered significant community discussion, indicating widespread awareness among security researchers.

Impacted Technologies

VendorProductVersion(s)CPE
>= 10.0.0, < 10.0.8CPE matchmatch criteria
cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*
>= 10.2.0, < 10.2.3CPE matchmatch criteria
cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
94.13%
Probability of exploitation in next 30 days
EPSS Percentile
99.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
Added to KEV · Mar 25, 2022
Nuclei: CVE-2019-12989 · Oct 17, 2025
ExploitDB: EDB-47112 · Jul 12, 2019
This CVE's current EPSS score of 0.9413 is in the 99th percentile among its peer group of 36,833 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (7)

aristavendor investigatingvia llm_extracted
citrixvendor investigatingvia nvd_reference
View patch
naturalintelligencevendor investigatingvia llm_extracted
netgearvendor investigatingvia llm_extracted
opencartvendor investigatingvia llm_extracted
payloadcmsvendor investigatingvia llm_extracted
safarivendor investigatingvia llm_extracted

Vendor Advisories (6)

netgearllm-netgear-9500006eef23244fCRITICAL

Citrix SD-WAN Appliance Multiple Vulnerabilities

Jul 2, 2019
aristallm-arista-170056efe11f1558CRITICAL

Citrix SD-WAN Appliance Multiple Vulnerabilities

Jul 2, 2019
opencartllm-opencart-27ed6abc44f1fdfcCRITICAL

Citrix SD-WAN Appliance Multiple Vulnerabilities

Jul 2, 2019
safarillm-safari-77d327c4a1e81738CRITICAL

Citrix SD-WAN Appliance Multiple Vulnerabilities

Jul 2, 2019
naturalintelligencellm-naturalintelligence-b1a366cc4b73eb42CRITICAL

Citrix SD-WAN Appliance Multiple Vulnerabilities

Jul 2, 2019
payloadcmsllm-payloadcms-39fcef1fe258ff11CRITICAL

Citrix SD-WAN Appliance Multiple Vulnerabilities

Jul 2, 2019

References

cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
packetstormsecurity.com / files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html
ExploitThird Party AdvisoryVDB Entry
support.citrix.com / article/CTX251987
Vendor Advisory
tenable.com / security/research/tra-2019-32
ExploitThird Party Advisory
securityfocus.com / bid/109133
Broken LinkThird Party AdvisoryVDB Entry