Gateway Plug In
Vendor:
First CVE: Dec 14, 2020 · Active for 5 years
3
Total CVEs
More Total CVEs than 68% of tracked products
1.5
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 74% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Gateway Plug In over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 14, 2020
5 years ago
Most Recent CVE
May 26, 2022
1,523 days ago
CVE Severity & Scoring
Gateway Plug In3 CVEs
67%
33%
All CVEs352,785 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local1 (33.3%)
Network2 (66.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (33.3%)
High0 (0.0%)
None2 (66.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-8257CRITICAL Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks | Dec 14, 2020 | 9.8 | 24 | NO | NO |
CVE-2022-21827HIGH An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gain | May 26, 2022 | 7.1 | 23 | NO | NO |
CVE-2020-8258HIGH Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary | Dec 14, 2020 | 7.5 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (3 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (3 CVEs).
Media Mentions
Signals from CVEs in this product scope (3 CVEs).
Top CNAs Publishing CVEs For Gateway Plug In
Top CWEs
Versions
No cataloged versions.