Known vulnerabilities in Citrix Netscaler ADC - page 2

Vendor: Citrix
Software CPE: cpe:2.3:a:citrix:citrix_netscaler_adc:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 10
Known exploited (KEV): 17

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Citrix Netscaler ADC Citrix Netscaler ADC is affected by 56 known vulnerabilities: 9 critical, 13 high, 26 medium, 8 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118307 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12101
CWE-79 Medium
Available
No
12.1-55.333, 13.1-37.250, 13.1-60.32, 14.1-56.73 11.11.2025 SB2025111173
#VU114449 - Improper Access Control
CVE-2025-8424
CWE-284 Medium
No
No
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU114448 - Memory corruption
CVE-2025-7776
CWE-119 High
No
No
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU114447 - Memory corruption
CVE-2025-7775
CWE-119 Critical
Available
Exploited
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU111952 - Memory corruption
CVE-2025-6543
CWE-119 High
No
Exploited
13.1-59.19, 14.1-47.46 26.06.2025 SB2025062606
#VU111237 - Out-of-bounds read
CVE-2025-5777
CWE-125 High
Available
Exploited
12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56 17.06.2025 SB2025061749
#VU111236 - Improper Access Control
CVE-2025-5349
CWE-284 High
No
No
12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56 17.06.2025 SB2025061749
#VU100415 - Improper Access Control
CVE-2024-8535
CWE-284 Medium
No
No
12.1-55.321, 13.1-37.207, 13.1-55.34, 14.1-29.72 13.11.2024 SB2024111301
#VU100414 - Memory corruption
CVE-2024-8534
CWE-119 Medium
No
No
12.1-55.321, 13.1-37.207, 13.1-55.34, 14.1-29.72 13.11.2024 SB2024111301
#VU94076 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-5492
CWE-601 Medium
No
No
12.1-55.304, 13.0-92.31, 13.1-37.183, 13.1-53.17, 14.1-25.53 10.07.2024 SB2024071060
#VU94075 - Memory corruption
CVE-2024-5491
CWE-119 Low
No
No
12.1-55.304, 13.0-92.31, 13.1-37.183, 13.1-53.17, 14.1-25.53 10.07.2024 SB2024071060
#VU93515 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2006-5051
CWE-362 Critical
No
No
12.1-55.309, 13.0-92.31, 13.1-37.190, 13.1-53.24, 14.1-25.56 01.07.2024 SB2006092801
SB2024071109
SB2024071110
and 5 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
12.1-55.309, 13.0-92.31, 13.1-37.190, 13.1-53.24, 14.1-25.56 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU85436 - Memory corruption
CVE-2023-6549
CWE-119 High
No
Exploited
12.1-55.302, 13.0-92.21, 13.1-37.176, 13.1-51.15, 14.1-12.35 16.01.2024 SB2024011635
#VU85435 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-6548
CWE-94 High
No
Exploited
12.1-55.302, 13.0-92.21, 13.1-37.176, 13.1-51.15, 14.1-12.35 16.01.2024 SB2024011635
#VU81927 - Memory corruption
CVE-2023-4967
CWE-119 High
No
No
13.0-92.19, 13.1-49.15, 14.1-8.50 11.10.2023 SB2023101192
#VU81926 - Memory corruption
CVE-2023-4966
CWE-119 Critical
Available
Exploited
13.0-92.19, 13.1-49.15, 14.1-8.50 11.10.2023 SB2023101192
#VU78375 - Improper Access Control
CVE-2023-3467
CWE-284 Medium
No
No
12.1-55.297, 13.0.91.13, 13.1-37.159, 13.1-49.13 19.07.2023 SB2023071927
#VU78374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3466
CWE-79 Low
No
No
12.1-55.297, 13.0.91.13, 13.1-37.159, 13.1-49.13 19.07.2023 SB2023071927
#VU78373 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-3519
CWE-94 Critical
Available
Exploited
12.1-55.297, 13.0.91.13, 13.1-37.159, 13.1-49.13 19.07.2023 SB2023071927


Showing elements 21 - 40 out of 56