← Back to browse
·
API
CVE-2019-12989
Severity
CRITICAL
CVSS
9.8
EPSS
0.94131
Risk score
57.95
CISA KEV
Yes
PoC
No
Published
2019-07-16
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2019-4564, GHSA-9Q4P-22W8-H32X
Products
Citrix:SD-WAN and NetScaler, n/a:n/a n/a
Sources
cisa.gov
CVE-2019-12989
euvd
EUVD-2019-4564
Description
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.
References
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2019-12989
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4564
https://www.tenable.com/security/research/tra-2019-32
http://www.securityfocus.com/bid/109133
http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html
https://support.citrix.com/article/CTX251987