n/a Citrix ADC, Citrix Gateway

Name: n/a Citrix ADC, Citrix Gateway
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical5high3medium0low

updated 2026-10-27

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-8300US	medium6.5	3.00% (87th)	Exploit	no fix	2021-06-16	≤ Fixed in Citrix ADC and Citrix Gateway 13.0 before 13.0-82.41, Citrix ADC and Citrix Gateway 12.1 before 12.1-62.23, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238
CVE-2020-8187US	high7.5	1.95% (80th)	—	no fix	2020-07-10	≤ 11.1-63.9, 12.0-62.10
CVE-2020-8197US	high8.8	1.82% (79th)	—	no fix	2020-07-10	≤ 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18
CVE-2020-8190US	high7.5	1.23% (69th)	—	no fix	2020-07-10	≤ 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18
CVE-2020-8245US	medium6.1	0.93% (61st)	—	no fix	2020-09-18	≤ Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b
CVE-2021-22955US	high7.5	0.92% (60th)	—	no fix	2021-12-07	≤ Citrix ADC 111.1, 2.1, 13.0,13.1
CVE-2021-22920US	medium6.5	0.92% (60th)	—	no fix	2021-08-05	2 versions
CVE-2021-22927US	high8.1	0.84% (58th)	—	no fix	2021-08-05	4 versions

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-281Improper Preservation of Permissions1 CVEs
CWE-384Session Fixation1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.