Citrix Vulnerabilities

Comprehensive security vulnerability database for Citrix products

Last updated: Jan 17, 2024
Total CVEs

2

Critical

1

With Exploits

2

Last 30 Days

0

Severity Distribution

Critical1
50%
High1
50%
Medium0
0%
Low0
0%
DescriptionVendor / ProductExploit Status
CVE-2023-65497.5

This vulnerability allows an attacker to crash the NetScaler application delivery controller or read sensitive data from memory without needing to log in. It can be exploited simply by sending specially crafted requests to the device, making it a significant risk for organizations using this product.

citrixnetscaler application delivery controller
Exploit Available
about 2 years agoJan 17, 2024
CVE-2023-244899.8

An attacker can remotely take control of the ShareFile storage zones controller without needing to log in, which could lead to unauthorized access to sensitive data. This vulnerability affects systems that are managed by customers, meaning it’s not reliant on any specific user credentials to exploit.

citrixsharefile storage zones controller
Exploit Available
over 2 years agoJul 10, 2023

About Citrix Security

This page tracks all publicly disclosed security vulnerabilities (CVEs) affecting Citrix products. Our database is updated in real-time from the National Vulnerability Database (NVD) and enriched with exploit information from GitHub and other security research sources.

Each CVE listing includes CVSS severity scores, exploit availability status, AI-powered vulnerability summaries, and links to official patches and security advisories.