CVE-2020-8187: Citrix Application Delivery Controller Firmware

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack.

Affected products

• Citrix Application Delivery Controller Firmware: from 11.1, before 11.1-63.9 (fixed in 11.1-63.9); from 12.0, before 12.0-62.10 (fixed in 12.0-62.10)
• Citrix NetScaler Gateway Firmware: from 11.1, before 11.1-63.9 (fixed in 11.1-63.9); from 12.0, before 12.0-62.10 (fixed in 12.0-62.10)

Published 2020-07-10. Last modified 2026-06-17.