Live › vulnerability › CVE-2020-8195
Go to dashboardCitrix ADC, Citrix Gateway and certain Citrix SD-WAN WANOP appliances leak information to unauthenticated or remote parties. CISA lists it as actively exploited in the wild, and attackers can use the leaked data to support further attacks against the appliance.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
This page as .md · .json · in your agent: get_signal("CVE-2020-8195")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.