Sd Wan
Vendor:
First CVE: Oct 23, 2018 · Active for 7 years
18
Total CVEs
More Total CVEs than 93% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
8.9
Avg CVSS
Higher Avg CVSS than 83% of tracked products
11.1%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Sd Wan over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 23, 2018
7 years ago
Most Recent CVE
Dec 7, 2021
1,691 days ago
CVE Severity & Scoring
Sd Wan18 CVEs
39%
56%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network18 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low17 (94.4%)
High1 (5.6%)
Unknown0 (0.0%)
User Interaction
None18 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (16.7%)
High0 (0.0%)
None15 (83.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-12989CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. | Jul 16, 2019 | 9.8 | 98 | YES | YES |
CVE-2019-12991HIGH Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6). | Jul 16, 2019 | 8.8 | 94 | YES | YES |
CVE-2019-12988CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6). | Jul 16, 2019 | 9.8 | 65 | NO | YES |
CVE-2019-12987CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6). | Jul 16, 2019 | 9.8 | 63 | NO | YES |
CVE-2019-12986CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6). | Jul 16, 2019 | 9.8 | 62 | NO | YES |
CVE-2019-12985CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6). | Jul 16, 2019 | 9.8 | 62 | NO | YES |
CVE-2019-12990CRITICAL Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal. | Jul 16, 2019 | 9.8 | 61 | NO | YES |
CVE-2019-12992HIGH Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6). | Jul 16, 2019 | 8.8 | 51 | NO | NO |
CVE-2020-8271CRITICAL Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8 | Nov 16, 2020 | 9.8 | 37 | NO | NO |
CVE-2018-17445CRITICAL A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. | Oct 23, 2018 | 9.8 | 34 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
2 CVEs
11.1% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
6 CVEs
33.3% of CVEs· 98th percentile
ExploitDB
2 CVEs
11.1% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Sd Wan
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 10.1.0 | 5 | 8.9 | 4.2% | 0 | 0 |