Citrix Application Delivery Controller vulnerabilities

4 CVEs affecting Citrix Application Delivery Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-24488, published 2023-07-10.

More from Citrix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-24488, published 2023-07-10. Medium severity, CVSS 6.1. EPSS: 80.9% chance of exploitation in the next 30 days. Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting
• CVE-2023-24487, published 2023-07-10. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Arbitrary file read in Citrix ADC and Citrix Gateway 
• CVE-2022-27508, published 2023-01-26. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Unauthenticated denial of service
• CVE-2022-27507, published 2023-01-26. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Authenticated denial of service