CyberSec.Space Logo
Back to CVE Browser

CVE-2019-18225

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0860%
EPSS Percentile34.36th
PublishedOct 21, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name.

Affected Platforms (CPE)

💻
Citrix

Application Delivery Controller Firmware

= 10.5
💻
Citrix

Application Delivery Controller Firmware

= 11.1
💻
Citrix

Application Delivery Controller Firmware

= 12.0
💻
Citrix

Application Delivery Controller Firmware

= 12.1
💻
Citrix

Application Delivery Controller Firmware

= 13.0
💻
Citrix

Netscaler Gateway Firmware

= 10.5
💻
Citrix

Netscaler Gateway Firmware

= 11.1
💻
Citrix

Netscaler Gateway Firmware

= 12.0
💻
Citrix

Netscaler Gateway Firmware

= 12.1
💻
Citrix

Gateway Firmware

= 13.0

References & Advisories

🔗 https://support.citrix.com/article/CTX261055
🔗 https://support.citrix.com/article/CTX261055

Related Vulnerabilities

CVE-2015-36425.9

The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices ...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...