---
id: "CVE-2020-8195"
kind: "vulnerability"
aliases: ["CVE-2020-8195"]
title: "Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability"
severity: "medium"
cvss: 6.5
epss: 0.33029
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["citrix-adc", "citrix-gateway", "exploited", "infrastructure", "sd-wan-wanop", "self-hosted"]
not_affected_if: ["managed-hosting", "unaffected-models"]
published_at: "2020-07-10T16:15:12+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8195", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8195", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8195", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

Citrix ADC, Citrix Gateway and certain Citrix SD-WAN WANOP appliances leak information to unauthenticated or remote parties. CISA lists it as actively exploited in the wild, and attackers can use the leaked data to support further attacks against the appliance.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance affected ? fixed ?

## Fix

Apply the Citrix update for the affected ADC, Gateway or SD-WAN WANOP build per vendor instructions (CISA's required action). Affected versions: unknown from sources.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8195
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2020-8195
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2020-8195

## From the sources

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_