Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-8163 State: PUBLISHED Published: 2020-07-02T18:35:12 Last Updated: 2024-08-04T09:48:25.683Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-94 Description: The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/304805 - https://groups.google.com/g/rubyonrails-security/c/hWuKcHyoKh0 - https://lists.debian.org/debian-lts-announce/2020/07/msg00013.html - http://packetstormsecurity.com/files/158604/Ruby-On-Rails-5.0.1-Remote-Code-Execution.ht
nnounce/2020/07/msg00013.html - http://packetstormsecurity.com/files/158604/Ruby-On-Rails-5.0.1-Remote-Code-Execution.html
CVE ID: CVE-2020-8164 State: PUBLISHED Published: 2020-06-19T17:04:13 Last Updated: 2024-08-04T09:48:25.653Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-502 Description: A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/292797 - https://groups.google.com/g/rubyonrails-security/c/f6ioe4sdpbY - https://lists.debian.org/debian-lts-announce/2020/06/msg00022.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00013.html -
an.org/debian-lts-announce/2020/06/msg00022.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00013.html - https://www.debian.org/security/2020/dsa-4766 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00089.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00093.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00107.html
CVE ID: CVE-2020-8165 State: PUBLISHED Published: 2020-06-19T17:05:30.000Z Last Updated: 2025-05-09T20:03:28.191Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-502 Description: A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/413388 - https://groups.google.com/g/rubyonrails-security/c/bv6fW4S0Y1c - https://lists.debian.org/debian-lts-announce/2020/06/msg00022.html - https://weblog.rubyonrails.org
rity/c/bv6fW4S0Y1c - https://lists.debian.org/debian-lts-announce/2020/06/msg00022.html - https://weblog.rubyonrails.org/2020/5/18/Rails-5-2-4-3-and-6-0-3-1-have-been-released/ - https://lists.debian.org/debian-lts-announce/2020/07/msg00013.html - https://www.debian.org/security/2020/dsa-4766 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00034.html
CVE ID: CVE-2020-8166 State: PUBLISHED Published: 2020-07-02T18:35:17 Last Updated: 2024-08-04T09:48:25.645Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-352 Description: A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a global CSRF token such as the one present in the authenticity_token meta tag, forge a per-form CSRF token. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/732415 - https://groups.google.com/g/rubyonrails-security/c/NOjKiGeXUgw - https://www.debian.org/security/2020/dsa-4766
CVE ID: CVE-2020-8167 State: PUBLISHED Published: 2020-06-19T17:16:06 Last Updated: 2024-08-04T09:48:25.785Z Vendors: n/a Products: http://github.com/rails/rails Problem Types: CWE-352 Description: A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/189878 - https://groups.google.com/g/rubyonrails-security/c/x9DixQDG9a0 - https://www.debian.org/security/2020/dsa-4766
CVE ID: CVE-2020-8168 State: PUBLISHED Published: 2020-05-26T15:43:00 Last Updated: 2024-08-04T09:48:25.666Z Vendors: n/a Products: AirMax AirOS for TI, XW and XM boards Problem Types: CWE-352 Description: We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Attackers can abuse multiple end-points not protected against cross-site request forgery (CSRF), as a result authenticated users can be persuaded to visit malicious web pages, which allows attackers to perform arbitrary actions, such as downgrade the device's firmware to olde
alicious web pages, which allows attackers to perform arbitrary actions, such as downgrade the device's firmware to older versions, modify configuration, upload arbitrary firmware, exfiltrate files and tokens.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-advisory-bulletin-009-009/c45b6c35-2e0d-4aeb-a9ef-e1d49bcf5fd8%2C - https://community.ui.com/releases/airMAX-M-v6-3-0/c8d5dec9-4030-4d7e-b23f-6a5b35ed3d83%2C - https://www.ui.com/download/airmax-m
CVE ID: CVE-2020-8169 State: PUBLISHED Published: 2020-12-14T19:41:54 Last Updated: 2024-08-04T09:48:25.642Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-200 Description: curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s). Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/874778 - https://curl.se/docs/CVE-2020-8169.html - https://www.debian.org/security/2021/dsa-4881 - https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2020-8170 State: PUBLISHED Published: 2020-05-26T15:37:27 Last Updated: 2024-08-04T09:56:27.421Z Vendors: n/a Products: AirMax AirOS for TI, XW and XM boards Problem Types: CWE-79 Description: We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scripting (XSS), allowing attackers to abuse the user' session information and/or account takeover of the admin user.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax dow
unt takeover of the admin user.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ui.com/download/airmax-m - https://community.ui.com/releases/Security-advisory-bulletin-010-010/36a8448a-7dbf-4d30-bb54-398c44591dd4 - https://community.ui.com/releases/airMAX-M-v6-3-0/c8d5dec9-4030-4d7e-b23f-6a5b35ed3d83
CVE ID: CVE-2020-8171 State: PUBLISHED Published: 2020-05-26T15:40:53 Last Updated: 2024-08-04T09:56:26.875Z Vendors: n/a Products: AirMax AirOS for TI, XW and XM boards Problem Types: CWE-77 Description: We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to command injection. It is possible to craft an input string that passes the filter check but still contains commands, resulting in remote code execution.Mitigation:Update to the latest AirMax AirOS f
ter check but still contains commands, resulting in remote code execution.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ui.com/download/airmax-m - https://community.ui.com/releases/airMAX-M-v6-3-0/c8d5dec9-4030-4d7e-b23f-6a5b35ed3d83 - https://community.ui.com/releases/Security-advisory-bulletin-011-011/d0d411a5-6dcb-4988-9709-d57f50957261
CVE ID: CVE-2020-8172 State: PUBLISHED Published: 2020-06-08T13:08:16 Last Updated: 2024-08-04T09:56:26.895Z Vendors: n/a Products: https://github.com/nodejs/node Problem Types: Privilege Escalation (CAPEC-233) Description: TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpujul2020.html - https://hackerone.com/reports/811502 - https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/ - https://security.netapp.com/advisory/ntap-20200625-0002/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.gen
.netapp.com/advisory/ntap-20200625-0002/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.gentoo.org/glsa/202101-07 - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-8173 State: PUBLISHED Published: 2020-10-30T18:12:26 Last Updated: 2024-08-04T09:56:27.378Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-310 Description: A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/852841 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-023
CVE ID: CVE-2020-8174 State: PUBLISHED Published: 2020-07-24T21:45:37 Last Updated: 2024-08-04T09:56:26.828Z Vendors: n/a Products: https://github.com/nodejs/node Problem Types: CWE-119 Description: napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/784186 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.gentoo.org/glsa/202101-07 - https://www.oracle.com/security-alerts/cpujan2021.html - https://security.netapp.com/advisory/ntap-20201023-0003/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://www
security.netapp.com/advisory/ntap-20201023-0003/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-8175 State: PUBLISHED Published: 2020-07-24T21:26:45 Last Updated: 2024-08-04T09:56:26.893Z Vendors: n/a Products: jpeg-js Problem Types: CWE-400 Description: Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/842462
CVE ID: CVE-2020-8176 State: PUBLISHED Published: 2020-07-02T18:35:21 Last Updated: 2024-08-04T09:56:26.921Z Vendors: n/a Products: koa-shopify-auth Problem Types: CWE-79 Description: A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Shopify/quilt/pull/1455 - https://hackerone.com/reports/881409
CVE ID: CVE-2020-8177 State: PUBLISHED Published: 2020-12-14T19:42:16 Last Updated: 2024-08-04T09:56:26.901Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-99 Description: curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/887462 - https://curl.se/docs/CVE-2020-8177.html - https://www.debian.org/security/2021/dsa-4881 - https://www.oracle.com/security-alerts/cpujan2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2020-8178 State: PUBLISHED Published: 2020-07-15T16:10:35 Last Updated: 2024-08-04T09:56:26.920Z Vendors: n/a Products: jison Problem Types: CWE-78 Description: Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/690010
CVE ID: CVE-2020-8179 State: PUBLISHED Published: 2020-07-02T18:35:19 Last Updated: 2024-08-04T09:56:26.920Z Vendors: n/a Products: Nextcloud Deck Problem Types: CWE-284 Description: Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/867052 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-022
CVE ID: CVE-2020-8180 State: PUBLISHED Published: 2020-06-08T13:08:19 Last Updated: 2024-08-04T09:56:27.489Z Vendors: n/a Products: Nextcloud Talk Problem Types: CWE-94 Description: A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/851807 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-021
CVE ID: CVE-2020-8181 State: PUBLISHED Published: 2020-07-10T15:48:41 Last Updated: 2024-08-04T09:56:27.392Z Vendors: n/a Products: Nextcloud Contact Problem Types: CWE-840 Description: A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/808287%2C - https://nextcloud.com/security/advisory/?id=NC-SA-2020-024
CVE ID: CVE-2020-8182 State: PUBLISHED Published: 2020-10-05T13:17:28 Last Updated: 2024-08-04T09:56:27.465Z Vendors: n/a Products: Nextcloud Deck Problem Types: CWE-284 Description: Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/827816 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-025
CVE ID: CVE-2020-8183 State: PUBLISHED Published: 2020-10-30T18:13:18 Last Updated: 2024-08-04T09:56:26.891Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-256 Description: A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=NC-SA-2020-026 - https://hackerone.com/reports/885041
CVE ID: CVE-2020-8184 State: PUBLISHED Published: 2020-06-19T00:00:00 Last Updated: 2024-08-04T09:56:26.918Z Vendors: n/a Products: https://github.com/rack/rack Problem Types: CWE-784 Description: A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/895727 - https://groups.google.com/g/rubyonrails-security/c/OWtmozPH9Ak - https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html - https://usn.ubuntu.com/4561-1/ - https://lists.debian.org/de
ists.debian.org/debian-lts-announce/2020/07/msg00006.html - https://usn.ubuntu.com/4561-1/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00038.html
CVE ID: CVE-2020-8185 State: PUBLISHED Published: 2020-07-02T18:35:06 Last Updated: 2024-08-04T09:56:28.317Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-400 Description: A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/899069 - https://groups.google.com/g/rubyonrails-security/c/pAe9EV8gbM0 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJ7NUWXAEVRQCROIIBV4C6WXO6IR3KSB/
CVE ID: CVE-2020-8186 State: PUBLISHED Published: 2020-07-10T15:37:18 Last Updated: 2024-08-04T09:56:26.952Z Vendors: n/a Products: devcert Problem Types: CWE-77 Description: A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/863544
CVE ID: CVE-2020-8187 State: PUBLISHED Published: 2020-07-10T15:35:56 Last Updated: 2024-08-04T09:56:28.243Z Vendors: n/a Products: Citrix ADC, Citrix Gateway Problem Types: CWE-20 Description: Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX276688
CVE ID: CVE-2020-8188 State: PUBLISHED Published: 2020-07-02T18:35:14 Last Updated: 2024-08-04T09:56:28.305Z Vendors: n/a Products: Protect for UniFi Cloud Key Gen2 Plus, UniFi Dream Machine Pro, UNVR Problem Types: CWE-77 Description: We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on Protect firmware v1.13.2, v1.14.9 and prior according to the description below:View only users can run certain custom commands which allows them to assign themselves unauthorized roles and escalate their privileges. Additional Analyst Notes: - CVE Program Container:
assign themselves unauthorized roles and escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-advisory-bulletin-012-012/1bba9134-f888-4010-81c0-b0dd53b9bda4 - https://community.ui.com/releases/UniFi-Protect-1-13-3/f4be7d35-93a3-422b-8eef-122e442c00ba - https://community.ui.com/releases/UniFi-Protect-1-14-10/48a8dbdd-b872-47fa-bbde-1d24ddf5d5b5
CVE ID: CVE-2020-8189 State: PUBLISHED Published: 2020-08-21T20:34:54 Last Updated: 2024-08-04T09:56:28.242Z Vendors: n/a Products: Desktop Client Problem Types: CWE-79 Description: A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/685552 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-027 - https://security.gentoo.org/glsa/202009-09
CVE ID: CVE-2020-8190 State: PUBLISHED Published: 2020-07-10T15:32:34 Last Updated: 2024-08-04T09:56:27.603Z Vendors: n/a Products: Citrix ADC, Citrix Gateway Problem Types: Privilege Escalation (CAPEC-233) Description: Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX276688
CVE ID: CVE-2020-8191 State: PUBLISHED Published: 2020-07-10T15:38:10 Last Updated: 2024-08-04T09:56:28.333Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Problem Types: CWE-79 Description: Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows reflected Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX276688
CVE ID: CVE-2020-8192 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.671Z Vendors: n/a Products: fastify Problem Types: CWE-400 Description: A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/903521
CVE ID: CVE-2020-8193 State: PUBLISHED Published: 2020-07-10T15:38:28.000Z Last Updated: 2025-10-21T23:35:40.928Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Problem Types: CWE-284 Description: Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX276688 - http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusi
pport.citrix.com/article/CTX276688 - http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html
CVE ID: CVE-2020-8194 State: PUBLISHED Published: 2020-07-10T15:38:54 Last Updated: 2024-08-04T09:56:27.601Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Problem Types: CWE-94 Description: Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the modification of a file download. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX276688
CVE ID: CVE-2020-8195 State: PUBLISHED Published: 2020-07-10T15:39:35.000Z Last Updated: 2025-10-21T23:35:40.642Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Problem Types: CWE-20 Description: Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX276688 - http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Loca
: - https://support.citrix.com/article/CTX276688 - http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html
CVE ID: CVE-2020-8196 State: PUBLISHED Published: 2020-07-10T15:39:54.000Z Last Updated: 2025-10-21T23:35:40.361Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Problem Types: CWE-284 Description: Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX276688 - http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local
- https://support.citrix.com/article/CTX276688 - http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html