Vulnerabilities > Citrix > Netscaler SD WAN

DATE CVE VULNERABILITY TITLE RISK
2018-10-23 CVE-2018-17447 Information Exposure Through Log Files vulnerability in Citrix Netscaler Sd-Wan and Sd-Wan
An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
network
low complexity
citrix CWE-532
7.5
2018-10-23 CVE-2018-17446 SQL Injection vulnerability in Citrix Netscaler Sd-Wan and Sd-Wan
A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
network
low complexity
citrix CWE-89
critical
9.8
2018-10-23 CVE-2018-17445 Command Injection vulnerability in Citrix Netscaler Sd-Wan and Sd-Wan
A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
network
low complexity
citrix CWE-77
critical
9.8
2018-10-23 CVE-2018-17444 Path Traversal vulnerability in Citrix Netscaler Sd-Wan and Sd-Wan
A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
network
low complexity
citrix CWE-22
7.5
2018-03-01 CVE-2018-5314 Improper Authentication vulnerability in Citrix products
Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.
network
low complexity
citrix CWE-287
7.5
2017-07-20 CVE-2017-6316 Unspecified vulnerability in Citrix Netscaler Sd-Wan
Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie.
network
low complexity
citrix
critical
9.8