Citrix NetScaler SD-WAN Center vulnerabilities

3 CVEs affecting Citrix NetScaler SD-WAN Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-6175, published 2020-03-16.

More from Citrix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-10883, published 2019-06-03. Critical severity, CVSS 9.8. EPSS: 65.5% chance of exploitation in the next 30 days. Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.
• CVE-2019-11345, published 2020-03-10. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS.
• CVE-2020-6175, published 2020-03-16. Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days. Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation.