CVE-2022-27505: Citrix SD-WAN 1000 Firmware

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Reflected cross site scripting (XSS)

Affected products

• Citrix SD-WAN 1000 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 1100 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 110 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 2000 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 2100 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 210 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 4000 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 400 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 4100 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 410 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 5100 Firmware: before 11.4.3a (fixed in 11.4.3a)
• Citrix SD-WAN 6100 Firmware: before 11.4.3a (fixed in 11.4.3a)

Published 2022-04-13. Last modified 2026-06-17.