SOURCE FACT
Citrix · SD-WAN and NetScaler
Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection.
Required action
Apply updates per vendor instructions.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2019-12989
View source evidence →CISA known exploited vulnerability
CVE-2019-12989
Citrix SD-WAN and NetScaler SQL Injection Vulnerability
CHECK YOUR OUTSIDE-IN INVENTORY