CVE-2023-3519

CVE Database · CVE-2023-3519

· CRITICALAnalyzed

CVSS v3.1

9.8

EPSS

99.34%

Published

Jul 19, 2023

Modified

Oct 24, 2025

CISA Known Exploited Vulnerability

Added: 2023-07-19 · Due: 2023-08-09

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Public PoC / Exploit (10)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unauthenticated remote code execution

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-94CWE-94

Affected Products (7)

citrix · netscaler_application_delivery_controller (up to 12.1-55.297)vulnerable

citrix · netscaler_application_delivery_controller (up to 13.0-91.13)vulnerable

citrix · netscaler_application_delivery_controller (up to 13.1-37.159)vulnerable

citrix · netscaler_application_delivery_controller (up to 13.1-49.13)vulnerable

citrix · netscaler_gateway (up to 13.0-91.13)vulnerable

citrix · netscaler_gateway (up to 13.1-49.13)vulnerable

References (5)

ExploitThird Party AdvisoryVDB Entry

Vendor Advisory

ExploitThird Party AdvisoryVDB Entry

Vendor Advisory