Vendor

Citrix

46 known vulnerabilities.

Products

Citrix Workspace app for Windows 6 Citrix Gateway, Citrix ADC 4 NetScaler ADC  4 NetScaler Gateway 4 UniconOS 3 Citrix Workspace app for HTML5 2 Citrix Application Delivery Management (Citrix ADM) 2 Workspace app for Windows 2 Secure Access Client for Mac 2 Secure Access Client for Windows 2 Citrix Secure Access Client for Windows 2 Citrix ADC and Citrix Gateway  2 Citrix Hypervisor 1 XenServer 1 Citrix ShareFile Storage Zones Controller 1 Citrix Provisioning 1 Windows Virtual Delivery Agent 1 Citrix SD-WAN Standard/Premium Editions 1 Citrix Session Recording 1 WorkSpace App 1 StoreFront 1 Citrix Endpoint Analysis Client for Windows 1 Windows Virtual Delivery Agent for CVAD and Citrix DaaS 1 Federated Authentication Service (FAS) 1 Citrix Secure Access client for Ubuntu 1 Citrix Workspace app for Linux 1 uberAgent 1 Virtual Delivery Agents for Windows for CVAD and Citrix DaaS Security 1 Virtual Delivery Agents for Linux for CVAD and Citrix DaaS Security 1 Citrix Virtual Apps and Desktops 1 Netscaler ADC, NetScaler Gateway 0 session_recording 0 NetScaler ADC and NetScaler Gateway 0 netscaler_application_delivery_controller 0 netscaler_gateway_firmware 0 application_delivery_management 0 netscaler_agent 0 netscaler_console 0 netscaler_svm 0 provisioning_services 0

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

High 7.3

CVE-2025-6759 Public exploit

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS

Citrix Windows Virtual Delivery Agent for CVAD and Citrix DaaS Windows Network devices

Jul 8, 2025
Medium 5.1

CVE-2024-8068 Exploited Public exploit

Privilege escalation to NetworkService Account access

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

Citrix Citrix Session Recording Network devices

Nov 12, 2024
KEV Aug 25, 2025
Critical 9.4

CVE-2023-4966 Exploited · Ransomware Public exploit EPSS 100%

Unauthenticated sensitive information disclosure

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

Citrix NetScaler Gateway NetScaler ADC  Network devices

Oct 10, 2023
KEV Oct 18, 2023
Critical 9.8

CVE-2023-3519 Exploited · Ransomware Public exploit EPSS 100%

Unauthenticated remote code execution

Citrix NetScaler Gateway NetScaler ADC  Network devices

Jul 19, 2023
KEV Jul 19, 2023
Critical 9.8

CVE-2023-24489 Exploited Public exploit EPSS 97%

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, cou…

Citrix Citrix ShareFile Storage Zones Controller Network devices

Jul 10, 2023
KEV Aug 16, 2023
Medium 6.1

CVE-2023-24488 Public exploit EPSS 81%

Cross site scripting

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting

Citrix Citrix ADC and Citrix Gateway  Network devices

Jul 10, 2023
Critical 9.8

CVE-2022-27518 Exploited Public exploit

Unauthenticated remote arbitrary code execution

Unauthenticated remote arbitrary code execution

Citrix Citrix Gateway, Citrix ADC Network devices

Dec 13, 2022
KEV Dec 13, 2022

Citrix

Products

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Privilege escalation to NetworkService Account access

Unauthenticated sensitive information disclosure

Unauthenticated remote code execution

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, cou…

Cross site scripting

Unauthenticated remote arbitrary code execution