Netscaler Application Delivery Controller Citrix Netscaler Application Delivery Controller

Do you want an email whenever new security vulnerabilities are reported in Citrix Netscaler Application Delivery Controller?

By the Year

In 2024 there have been 2 vulnerabilities in Citrix Netscaler Application Delivery Controller with an average score of 8.2 out of ten. Last year Netscaler Application Delivery Controller had 5 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Netscaler Application Delivery Controller in 2024 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2024 is greater by 0.37.

Year Vulnerabilities Average Score
2024 2 8.15
2023 5 7.78
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 0 0.00
2018 1 7.50

It may take a day or so for new Netscaler Application Delivery Controller vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Citrix Netscaler Application Delivery Controller Security Vulnerabilities

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway

CVE-2023-6549 7.5 - High - January 17, 2024

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service

Buffer Overflow

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway 

CVE-2023-6548 8.8 - High - January 17, 2024

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

Code Injection

Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server

CVE-2023-4967 7.5 - High - October 27, 2023

Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server

Buffer Overflow

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server

CVE-2023-4966 7.5 - High - October 10, 2023

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA ?virtual?server. 

Privilege Escalation to root administrator (nsroot)

CVE-2023-3467 8 - High - July 19, 2023

Privilege Escalation to root administrator (nsroot)

Reflected Cross-Site Scripting (XSS)

CVE-2023-3466 6.1 - Medium - July 19, 2023

Reflected Cross-Site Scripting (XSS)

XSS

Unauthenticated remote code execution

CVE-2023-3519 9.8 - Critical - July 19, 2023

Unauthenticated remote code execution

Code Injection

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0

CVE-2018-5314 7.5 - High - March 01, 2018

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.

authentification

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Citrix Netscaler Sd Wan or by Citrix? Click the Watch button to subscribe.

Citrix
Vendor

subscribe