CVE-2023-3519: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Published Jul 19, 2023
·Updated
Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.
Affected Software
9 affected components
Citrix NetScaler ADC and NetScaler Gateway
Citrix NetScaler Application Delivery Controller>=12.1<12.1-55.297
Citrix NetScaler Application Delivery Controller>=12.1<12.1-55.297
Citrix NetScaler Application Delivery Controller>=13.0<13.0-91.13
Citrix NetScaler Application Delivery Controller>=13.1<13.1-37.159
Citrix NetScaler Application Delivery Controller>=13.1<13.1-49.13
Citrix NetScaler Gateway>=13.0<13.0-91.13
Citrix NetScaler Gateway>=13.1<13.1-49.13
Citrix NetScaler Application Delivery Controller=11.1-65.22
Event History
Jul 19, 2023
CVE Published
via CISA·12:00 AM
Known Exploited
via CISA·12:00 AM
Known Ransomware
via CISA·12:00 AM
CVE Published
via MITRE·05:51 PM
Data Sourced
via MITRE·05:51 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Nov 17, 2023
News Published
04:45 PM
Jan 3, 2024
News Published
via The Register·01:15 PM
Jan 19, 2024
News Published
via The Register·09:51 PM
Feb 11, 2024
News Published
via BleepingComputer·03:09 PM
Aug 28, 2024
News Published
via BleepingComputer·05:22 PM
News Published
via BleepingComputer·05:23 PM
News Published
via The Register·06:00 PM
Nov 12, 2024
News Published
via BleepingComputer·04:48 PM
Nov 16, 2024
News Published
via BleepingComputer·03:30 PM
Nov 18, 2024
News Published
via BleepingComputer·10:40 PM
Dec 31, 2024
News Published
via BleepingComputer·03:13 PM
Jan 9, 2025
News Published
via BleepingComputer·05:20 PM
Jan 10, 2025
News Published
via Dark Reading·02:00 AM
News Published
via Dark Reading·02:01 AM
Mar 5, 2025
News Published
via The Register·05:22 PM
News Published
via BleepingComputer·06:18 PM
Aug 22, 2025
News Published
via BleepingComputer·09:56 PM
Jun 17, 2026
News Published
via Dark Reading·07:46 PM
Frequently Asked Questions
1
What is CVE-2023-3519?
CVE-2023-3519 is a code injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway that allows for unauthenticated remote code execution.
2
Who is affected by CVE-2023-3519?
Citrix NetScaler ADC and NetScaler Gateway users are affected by CVE-2023-3519.
3
How severe is CVE-2023-3519?
CVE-2023-3519 has a severity rating of critical.
4
How can I fix CVE-2023-3519?
To fix CVE-2023-3519, it is recommended to apply the security patches provided by Citrix.
5
Where can I find more information about CVE-2023-3519?
More information about CVE-2023-3519 can be found on the Citrix support website and Packet Storm Security.