CVE-2024-2049

Server-Side Request Forgery (SSRF)

State: Published
Severity: 6.5 Medium
Published: Mar 12, 2024
Updated: Apr 15, 2025
Reserved: Mar 1, 2024

Description

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	Citrix

Weaknesses

CWE-918 Server-Side Request Forgery (SSRF)

Affected Products

Product	Versions
Citrix SD-WAN Standard/Premium EditionsCitrix	11.4 to before 11.4.4.46Affected

References

https://support.citrix.com/article/CTX617071/citrix-sdwan-security-bulletin-for-cve20242049

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.