CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2022-275189.8/CRITICALEPSS 6.9%CISA KEV
2022-12-13

Citrix ADC and Gateway Unauthenticated Remote Code Execution Vulnerability Advisory (CVE-2022-27518)

[Affected Scope] Citrix ADC and Citrix Gateway versions 12.1 and 13.0 with SAML SP or IdP configuration enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code on the target appliance and gain full system control by sending specially crafted requests

[Mitigation] Immediately upgrade to the patched firmware versions (12.1-65.25, 13.0-88.16, or higher) provided by Citrix

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse