Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior
Críticas / altas1403▲ 50 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5) | 1.7% | — | Citrix Netscaler Access Gateway FirmwareCitrix Netscaler Access GatewayCitrix Netscaler Application Delivery Controller FirmwareCitrix Netscaler Application Delivery Controller | 16/7/2014 | 17/6/2026 | Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie. | |
| Modificada | Media (4.3) | 1.7% | — | Citrix Netscaler Application Delivery Controller FirmwareCitrix Netscaler Application Delivery ControllerCitrix Netscaler Access Gateway FirmwareCitrix Netscaler Access Gateway | 16/7/2014 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |
| Modificada | Media (4.3) | 1.2% | — | Citrix Netscaler Access Gateway FirmwareCitrix Netscaler Access Gateway | 2/5/2014 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access Gateway Enterprise Edition) 9.x before 9.3.66.5 and 10.x before 10.1.123.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |
| Modificada | Alta (10) | 1.1% | — | Citrix Netscaler Access Gateway FirmwareCitrix Netscaler Application Delivery Controller FirmwareCitrix Netscaler Access GatewayCitrix Netscaler Application Delivery Controller | 1/5/2014 | 17/6/2026 | Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation. | |
| Modificada | Alta (10) | 1.9% | — | Citrix Netscaler Access Gateway FirmwareCitrix Netscaler Application Delivery Controller FirmwareCitrix Netscaler Application Delivery ControllerCitrix Netscaler Access Gateway | 1/5/2014 | 17/6/2026 | Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors. | |
| Modificada | Media (5.4) | 1.5% | — | Citrix Netscaler Access Gateway FirmwareCitrix Netscaler Access Gateway | 25/4/2013 | 16/6/2026 | Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors. | |
| Modificada | Media (6.5) | 2.0% | — | Citrix Netscaler Access Gateway FirmwareCitrix Netscaler Access Gateway | 25/6/2009 | 16/6/2026 | The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions. |