{"history":[{"alert":0,"cve":"CVE-2020-8193","id":22037,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.88269, \"percentile\": 0.99773}"},{"alert":0,"cve":"CVE-2020-8193","id":19656,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.88269, \"percentile\": 0.99772}"},{"alert":0,"cve":"CVE-2020-8193","id":17622,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.88269, \"percentile\": 0.99771}"},{"alert":0,"cve":"CVE-2020-8193","id":15686,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.88269, \"percentile\": 0.99771}"},{"alert":0,"cve":"CVE-2020-8193","id":13664,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.88269, \"percentile\": 0.99771}"},{"alert":0,"cve":"CVE-2020-8193","id":11446,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.88269, \"percentile\": 0.99771}"},{"alert":1,"cve":"CVE-2020-8193","id":9328,"kind":"cna","observed_at":1793917201,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-04T09:56:27.459Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://support.citrix.com/article/CTX276688\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"NONE\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2020-8193\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-07T12:35:04.938931Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2021-11-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:35:40.928Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2021-11-03T00:00:00.000Z\", \"value\": \"CVE-2020-8193 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-284\", \"description\": \"Improper Access Control - Generic (CWE-284)\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2020-11-13T17:06:16.000Z\", \"orgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"shortName\": \"hackerone\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://support.citrix.com/article/CTX276688\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"support@hackerone.com\", \"ID\": \"CVE-2020-8193\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP\", \"version\": {\"version_data\": [{\"version_value\": \"Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7\"}]}}]}, \"vendor_name\": \"n/a\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Improper Access Control - Generic (CWE-284)\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"https://support.citrix.com/article/CTX276688\", \"refsource\": \"MISC\", \"url\": \"https://support.citrix.com/article/CTX276688\"}, {\"name\": \"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html\", \"refsource\": \"MISC\", \"url\": \"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"assignerShortName\": \"hackerone\", \"cveId\": \"CVE-2020-8193\", \"datePublished\": \"2020-07-10T15:38:28.000Z\", \"dateReserved\": \"2020-01-28T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:35:40.928Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2020-8193","id":9192,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.88269, \"percentile\": 0.9977}"},{"alert":0,"cve":"CVE-2020-8193","id":6980,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.88269, \"percentile\": 0.9977}"},{"alert":0,"cve":"CVE-2020-8193","id":4757,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.88269, \"percentile\": 0.99769}"},{"alert":0,"cve":"CVE-2020-8193","id":2539,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.88269, \"percentile\": 0.99769}"},{"alert":1,"cve":"CVE-2020-8193","id":1546,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2020-8193\", \"cwes\": [\"CWE-284\"], \"dateAdded\": \"2021-11-03\", \"dueDate\": \"2022-05-03\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2020-8193\", \"product\": \"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.\", \"vendorProject\": \"Citrix\", \"vulnerabilityName\": \"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability\"}"}],"record":{"affected":[{"product":"Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP","vendor":"n/a","versions":[{"status":"affected","version":"Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T09:56:27.459Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://support.citrix.com/article/CTX276688"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"}},{"other":{"content":{"id":"CVE-2020-8193","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-02-07T12:35:04.938931Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2021-11-03","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:35:40.928Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193"}],"timeline":[{"lang":"en","time":"2021-11-03T00:00:00.000Z","value":"CVE-2020-8193 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP","vendor":"n/a","versions":[{"status":"affected","version":"Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"}]}],"descriptions":[{"lang":"en","value":"Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"Improper Access Control - Generic (CWE-284)","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2020-11-13T17:06:16.000Z","orgId":"36234546-b8fa-4601-9d6f-f4e334aa8ea1","shortName":"hackerone"},"references":[{"tags":["x_refsource_MISC"],"url":"https://support.citrix.com/article/CTX276688"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"support@hackerone.com","ID":"CVE-2020-8193","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP","version":{"version_data":[{"version_value":"Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper Access Control - Generic (CWE-284)"}]}]},"references":{"reference_data":[{"name":"https://support.citrix.com/article/CTX276688","refsource":"MISC","url":"https://support.citrix.com/article/CTX276688"},{"name":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html"}]}}}},"cveMetadata":{"assignerOrgId":"36234546-b8fa-4601-9d6f-f4e334aa8ea1","assignerShortName":"hackerone","cveId":"CVE-2020-8193","datePublished":"2020-07-10T15:38:28.000Z","dateReserved":"2020-01-28T00:00:00.000Z","dateUpdated":"2025-10-21T23:35:40.928Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794457201,"cve":"CVE-2020-8193","description":"Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.","epss":{"date":"2026-11-12","epss":0.88269,"percentile":0.99773},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2020-8193","cwes":["CWE-284"],"dateAdded":"2021-11-03","dueDate":"2022-05-03","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8193","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.","vendorProject":"Citrix","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability"},"kev_checked":1794522003,"products":"n/a Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP","references":["https://support.citrix.com/article/CTX276688","http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}