CVE-2019-12991

披露于 2019/07/16 · 更新于 2025/10/14

CVSS 评分8.8/ 10.0

EPSS 概率85.9%百分位 99.3%

漏洞描述

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 Citrix SD-WAN 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2019-12989 Citrix SD-WAN and NetScaler SD-WAN - SQL Injection Citrix SD-WAN	严重	9.8	80.8%	PoCEXP	2019/07/16
CVE-2019-12990 Citrix SD-WAN Center - Local File Inclusion Citrix SD-WAN	严重	9.8	91.1%	PoCEXP	2019/07/16
CVE-2019-12988 Citrix SD-WAN Center - Remote Command Injection Citrix SD-WAN	严重	9.8	92.5%	PoCEXP	2019/07/16
CVE-2019-12987 Citrix SD-WAN Center - Remote Command Injection Citrix SD-WAN	严重	9.8	92.5%	PoCEXP	2019/07/16
CVE-2019-12986 Citrix SD-WAN Center - Remote Command Injection Citrix SD-WAN	严重	9.8	92.3%	PoCEXP	2019/07/16
CVE-2019-12985 Citrix SD-WAN Center - Remote Command Injection Citrix SD-WAN	严重	9.8	92.4%	PoCEXP	2019/07/16