CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Aug 9, 2023

CVE-2023-3519

High

EPSS 93.4%CISA KEVRansomware

Citrix/NetScaler ADC and NetScaler Gateway

Description

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.

EPSS — Exploit Probability

93.4%

Higher than 99.8% of all CVEs

Required Action

https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467; https://nvd.nist.gov/vuln/detail/CVE-2023-3519

Risk Assessment

CRITICAL

In CISA KEV

High EPSS

Ransomware

Details

Severity: High
EPSS: 93.4%
CISA KEV: Yes
Ransomware: Known
Articles: 0

Timeline

Published

Jul 19, 2023

Added to KEV

Jul 19, 2023

Remediation Due

Aug 9, 2023

Affected Product

Citrix

NetScaler ADC and NetScaler Gateway

View all Citrix CVEs

External Links

NVD (NIST)CVE Details MITRE CVE