Citrix NetScaler Access Gateway vulnerabilities

7 CVEs affecting Citrix NetScaler Access Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-4347, published 2014-07-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-2213, published 2009-06-25. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default…
CVE-2014-2881, published 2014-05-01. High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before…
CVE-2014-4347, published 2014-07-16. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain…
CVE-2014-4346, published 2014-07-16. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition)…
CVE-2013-2767, published 2013-04-25. Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows…
CVE-2014-1899, published 2014-05-02. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access Gateway Enterprise Edition) 9.x before 9.3.66.5 and 10.x before 10.1.123.9 allows remote attackers to…
CVE-2014-2882, published 2014-05-01. High severity, CVSS 10.0. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and…