CVE-2023-3519
Unauthenticated Remote Code Execution in Citrix NetScaler ADC and Gateway
⚡ KEV — Known Exploited
CVSS 9.8 (Critical)
EPSS 0.9710 (1th pct)
Technical Description
Unauthenticated Remote Code Execution in Citrix NetScaler ADC and Gateway.
Why this matters to your organisation:
CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 97.1% probability of exploitation within 30 days. The affected service is internet-facing, increasing exposure. This is a critical service for the organisation.
CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 97.1% probability of exploitation within 30 days. The affected service is internet-facing, increasing exposure. This is a critical service for the organisation.
Potential Impact
A vulnerability in netscaler_adc rated Critical (CVSS 9.8). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalogue, indicating it has been actively exploited in the wild.
✅ Recommended Next Action
Review CVE-2023-3519 and confirm whether netscaler_adc is in use.
Confidence: Not Applicable
The organisation does not use this product.
CVE Details
| Product | citrix netscaler_adc |
| Version Range | <= 13.1-48.47 → ∞ |
| Installed | Unknown |
| Match Type | Product Not Used |
| CVSS | 9.8 |
| KEV | YES |
| EPSS | 0.971 |
| Source |
NVD · July 18, 2023 View reference ↗ |
Score Breakdown
⚡ KEV+40
🌐 Exposure+20
⭐ Importance+15
📈 EPSS+14.6
🔢 CVSS+9.8
⚠ Uncertainty-10
Total89