NA
Network Security
NetScaler ADC
On CISA KEVExploited in the wildRansomware-linked
69
CVEs
13
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 17High 28Medium 12Low 0
Watch
Add NetScaler ADC to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5492 | 6.1 | Jul 10 | Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway Affected: 12.1 before 12.1-55.304; 12.1 before 12.1-55.304; 12.1 before 13.0-92.31; 13.1 before 13.1-37.183; 13.1 before 13.1-53.17; 14.1 before 14.1-25.53 |
| CVE-2023-3466 | 6.1 | Jul 19 | Reflected Cross-Site Scripting (XSS) Affected: 12.1 before 12.1-55.297; 12.1 before 12.1-55.297; 13.0 before 13.0-91.13; 13.1 before 13.1-37.159; 13.1 before 13.1-49.13; 11.1-65.22 |
| CVE-2023-24488 | 6.1 | Jul 10 | Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting Affected: 12.1 before 12.1-65.35; 13.0 before 13.0-90.11; 13.1 before 13.1-45.61 |
| CVE-2022-27509 | 6.1 | Jul 28 | Unauthenticated redirection to a malicious website Affected: 12.1 before 12.1-65.15; 13.0 before 13.0-86.17; 13.1 before 13.1-24.38 |
| CVE-2020-8245 | 6.1 | Sep 18 | Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before… Affected: 12.1 before 12.1-58.15 |
| CVE-2016-2072 | 6.1 | Feb 17 | The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e… Affected: 10.1; 10.5; 10.5e; 11.0; 10.1; 10.5; +2 more |
| CVE-2015-3642 | 5.9 | Aug 2 | The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0… Affected: All versions, or not specified |
| CVE-2015-2841 | – | Apr 3 | Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the… Affected: 10.5 |
| CVE-2015-2840 | – | Apr 3 | Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to inject arbitrary web script or HTML… Affected: 10.5 |
| CVE-2015-2839 | – | Apr 3 | The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site… Affected: 10.5 |
| CVE-2015-2838 | – | Apr 3 | Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators… Affected: 10.5 |
| CVE-2014-4347 | – | Jul 16 | Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows… Affected: All versions, or not specified |
| CVE-2014-4346 | – | Jul 16 | Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway… Affected: All versions, or not specified |
| CVE-2014-2882 | – | May 1 | Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has… Affected: All versions, or not specified |
| CVE-2014-2881 | – | May 1 | Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and… Affected: All versions, or not specified |
| CVE-2013-6011 | – | Oct 4 | Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a… Affected: All versions, or not specified |
| CVE-2007-6192 | – | Nov 30 | The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote… Affected: 8.0 |
| CVE-2007-6193 | – | Nov 30 | The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers to obtain sensitive network… Affected: 8.0 |
| CVE-2007-6037 | – | Nov 20 | Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 8.0_build_47.8 |