CyberSec.Space Logo
Back to CVE Browser

CVE-2019-19781

Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score54.1420%
EPSS Percentile95.49th
PublishedDec 27, 2019
Last ModifiedNov 7, 2025

Vulnerability Description

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

Affected Platforms (CPE)

💻
Citrix

Application Delivery Controller Firmware

= 10.5
💻
Citrix

Application Delivery Controller Firmware

= 11.1
💻
Citrix

Application Delivery Controller Firmware

= 12.0
💻
Citrix

Application Delivery Controller Firmware

= 12.1
💻
Citrix

Application Delivery Controller Firmware

= 13.0
💻
Citrix

Netscaler Gateway Firmware

= 10.5
💻
Citrix

Netscaler Gateway Firmware

= 11.1
💻
Citrix

Netscaler Gateway Firmware

= 12.0
💻
Citrix

Netscaler Gateway Firmware

= 12.1
💻
Citrix

Gateway Firmware

= 13.0

References & Advisories

🔗 http://packetstormsecurity.com/files/155904/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution.html
🔗 http://packetstormsecurity.com/files/155905/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution-Traversal.html
🔗 http://packetstormsecurity.com/files/155930/Citrix-Application-Delivery-Controller-Gateway-10.5-Remote-Code-Execution.html
🔗 http://packetstormsecurity.com/files/155947/Citrix-ADC-NetScaler-Directory-Traversal-Remote-Code-Execution.html
🔗 http://packetstormsecurity.com/files/155972/Citrix-ADC-Gateway-Path-Traversal.html
🔗 https://badpackets.net/over-25000-citrix-netscaler-endpoints-vulnerable-to-cve-2019-19781/
🔗 https://forms.gle/eDf3DXZAv96oosfj6
🔗 https://support.citrix.com/article/CTX267027

Related Vulnerabilities

CVE-2015-36425.9

The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices ...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...