CVE-2020-8187: Input Validation
First published: Fri Jul 10 2020(Updated: )
Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix Application Delivery Controller Firmware | >=11.1<11.1-63.9 | |
| Citrix Application Delivery Controller Firmware | >=12.0<12.0-62.10 | |
| Citrix Application Delivery Controller | ||
| Citrix Netscaler Gateway Firmware | >=11.1<11.1-63.9 | |
| Citrix Netscaler Gateway Firmware | >=12.0<12.0-62.10 | |
| Citrix NetScaler Gateway |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-8187.
What is the severity of CVE-2020-8187?
The severity of CVE-2020-8187 is high with a CVSS score of 7.5.
Which products are affected by CVE-2020-8187?
Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 are affected by CVE-2020-8187.
How does CVE-2020-8187 impact the affected products?
CVE-2020-8187 allows unauthenticated users to perform a denial of service attack on Citrix ADC and Citrix Gateway.
Is there a fix available for CVE-2020-8187?
Yes, Citrix has released a fix for CVE-2020-8187. Please refer to the official Citrix support article for more information.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/citrix
- canonical/citrix application delivery controller firmware
- version/citrix application delivery controller firmware/11.1
- version/citrix application delivery controller firmware/12.0
- canonical/citrix application delivery controller
- canonical/citrix netscaler gateway firmware
- version/citrix netscaler gateway firmware/11.1
- version/citrix netscaler gateway firmware/12.0
- canonical/citrix netscaler gateway