Netscaler Sd Wan
Vendor:
First CVE: Jul 20, 2017 · Active for 9 years
16
Total CVEs
More Total CVEs than 93% of tracked products
5.3
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
9.0
Avg CVSS
Higher Avg CVSS than 84% of tracked products
18.8%
KEV Rate
Higher KEV Rate than 99% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Netscaler Sd Wan over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 20, 2017
9 years ago
Most Recent CVE
Jul 16, 2019
2,569 days ago
CVE Severity & Scoring
Netscaler Sd Wan16 CVEs
31%
63%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network16 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (93.8%)
High1 (6.3%)
Unknown0 (0.0%)
User Interaction
None16 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low2 (12.5%)
High0 (0.0%)
None14 (87.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-12989CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. | Jul 16, 2019 | 9.8 | 98 | YES | YES |
CVE-2017-6316CRITICAL Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name | Jul 20, 2017 | 9.8 | 95 | YES | YES |
CVE-2019-12991HIGH Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6). | Jul 16, 2019 | 8.8 | 94 | YES | YES |
CVE-2019-12988CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6). | Jul 16, 2019 | 9.8 | 65 | NO | YES |
CVE-2019-12987CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6). | Jul 16, 2019 | 9.8 | 63 | NO | YES |
CVE-2019-12986CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6). | Jul 16, 2019 | 9.8 | 62 | NO | YES |
CVE-2019-12985CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6). | Jul 16, 2019 | 9.8 | 62 | NO | YES |
CVE-2019-12990CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal. | Jul 16, 2019 | 9.8 | 61 | NO | YES |
CVE-2019-12992HIGH Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6). | Jul 16, 2019 | 8.8 | 51 | NO | NO |
CVE-2018-17445CRITICAL A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | Oct 23, 2018 | 9.8 | 34 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
3 CVEs
18.8% of CVEs· 99th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
6 CVEs
37.5% of CVEs· 98th percentile
ExploitDB
3 CVEs
18.8% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Netscaler Sd Wan
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.3.0 | 1 | 7.5 | 2.9% | 0 | 0 |