CVE-2018-17446 - A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4

CRITICAL

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4

Published Oct 23, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 1.96%

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

http://www.securityfocus.com/bid/105711
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://support.citrix.com/article/CTX236992
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/105711		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://support.citrix.com/article/CTX236992		x_refsource_CONFIRMVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 23, 2018

Updated Aug 5, 2024

Reserved Sep 25, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a