⚠️ Actively exploited — CISA KEV
This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2023-07-19. It is confirmed exploited in the wild and must be patched as a priority.
Remediation deadline (US federal agencies): 2023-08-09
Used in known ransomware campaigns.
EPSS · FIRST.org
99.7%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v3.1 Score
9.8
/ 10.0
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Information
- Published
- 19 juil. 2023
- Updated
- 5 août 2026
- Status
- Analyzed
- Source
- secure@citrix.com
Affected products
citrix netscaler application delivery controller
Versions : 12.1-55.297, 13.0-91.13, 13.1-37.159, 13.1-49.13
citrix netscaler gateway
Versions : 13.0-91.13, 13.1-49.13
Weaknesses (CWE)
CWE-94CWE-94
References (5)
- http://packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-3519US Government Resource
Similar CVEs
Other vulnerabilities of type CWE-94
…
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.