Vulnerabilities > Citrix > Application Delivery Controller Firmware > 10.5.70.18
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-12-26 | CVE-2019-18177 | Unspecified vulnerability in Citrix Application Delivery Controller Firmware and Gateway In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. | 6.5 |
| 2021-12-07 | CVE-2021-22955 | Resource Exhaustion vulnerability in Citrix Application Delivery Controller Firmware and Gateway A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication. | 7.5 |
| 2021-12-07 | CVE-2021-22956 | Resource Exhaustion vulnerability in Citrix products An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication. | 7.5 |