citrix application delivery controller firmware

Name: citrix application delivery controller firmware
Brand: citrix

productUS

cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical10high13medium0low

updated 2026-10-25

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-19781US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-12-27	5 versions
CVE-2020-8193US	medium6.5OT critical	88.3% (100th)	KEV	13.0-58.30	2020-07-10	5 versions
CVE-2022-27518US	critical9.8OT critical	6.86% (94th)	KEV	13.0-58.32	2022-12-13	3 versions
CVE-2020-8195US	medium6.5OT critical	33.0% (98th)	KEV	12.1-57.18	2020-07-10	5 versions
CVE-2020-8196US	medium4.3OT critical	26.3% (98th)	KEV	10.5-70.18	2020-07-10	5 versions
CVE-2017-17382US	medium5.9OT elevated	13.9% (97th)	Exploit	no fix	2017-12-13	4 versions
CVE-2020-8300US	medium6.5	3.00% (87th)	Exploit	13.0-82.41	2021-06-16	4 versions
CVE-2020-8191US	medium6.1	23.5% (98th)	—	13.0-58.30	2020-07-10	5 versions
CVE-2020-8194US	medium6.5	10.8% (96th)	—	12.0-63.21	2020-07-10	5 versions
CVE-2018-7218US	critical9.8	6.16% (93rd)	—	no fix	2018-05-17	4 versions
CVE-2017-14602US	high7.2	2.42% (84th)	—	no fix	2017-09-26	6 versions
CVE-2020-8187US	high7.5	1.95% (80th)	—	11.1-63.9	2020-07-10	2 versions
CVE-2020-8197US	high8.8	1.82% (79th)	—	11.1-64.14	2020-07-10	5 versions
CVE-2017-17549US	medium5.9	1.57% (75th)	—	no fix	2017-12-13	4 versions
CVE-2020-8246US	high7.5	1.55% (75th)	—	11.1-65.12	2020-09-18	3 versions
CVE-2019-18225US	critical9.8	1.51% (74th)	—	no fix	2019-10-21	5 versions
CVE-2020-8247US	high8.8	1.35% (71st)	—	12.1-58.15	2020-09-18	3 versions
CVE-2020-8190US	high7.5	1.23% (69th)	—	12.0-63.21	2020-07-10	5 versions
CVE-2022-27510US	critical9.8OT elevated	1.12% (66th)	—	13.0-88.12	2022-11-08	4 versions
CVE-2020-8198US	medium6.1	0.97% (62nd)	—	11.1-64.14	2020-07-10	5 versions
CVE-2021-22919US	high7.5	0.94% (61st)	—	13.0-82.45	2021-08-05	4 versions
CVE-2020-8245US	medium6.1	0.93% (60th)	—	12.1-58.15	2020-09-18	3 versions
CVE-2021-22956US	high7.5	0.92% (60th)	—	13.0-83.27	2021-12-07	3 versions
CVE-2021-22955US	high7.5	0.92% (60th)	—	13.0-83.27	2021-12-07	3 versions
CVE-2021-22927US	high8.1	0.84% (57th)	—	12.1-55.238	2021-08-05	4 versions
CVE-2022-27516US	critical9.8	0.67% (51st)	—	12.1-65.21	2022-11-08	4 versions
CVE-2019-18177US	medium6.5	0.59% (48th)	—	13.0-58.30	2022-12-26	< 13.0-58.30
CVE-2022-27509US	medium6.1	0.54% (45th)	—	13.1-24.38	2022-07-28	4 versions
CVE-2020-8299US	medium6.5	0.42% (35th)	—	11.1-65.20	2021-06-16	4 versions
CVE-2022-27513US	critical9.6OT elevated	0.30% (22nd)	—	13.1-33.47	2022-11-08	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-287Improper Authentication5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-269Improper Privilege Management2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan