[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXnrLAmbddULf6IyAD4_QhscaKy89HnDxbZ7H8kv__BY":3,"g5a-family:citrix\u002Fnetscaler_application_delivery_controller":229,"g5a-ex:citrix\u002Fnetscaler_application_delivery_controller@*":233},{"success":4,"data":5},true,{"product":6,"versions":85,"topVulnerabilitiesByEpss":119,"kevVulnerabilities":176,"seoMetadata":207,"meta":226},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":84},"citrix","netscaler_application_delivery_controller",33,26,7,"2025-08-26",[14,19,21,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"11.0",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"11.1",{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},"11.1-65.22",2,{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},"12.0",{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},"12.1",{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.297",{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.300",{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.302",{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.328",{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.330",{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},"13.0",{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-91.13",{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-92.19",{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-92.21",{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},"13.1",{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.159",{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.164",{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.176",{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.235",{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.236",{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.241",{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-49.13",{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-49.15",{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-51.15",{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-58.32",{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-59.19",{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-59.22",{"version":73,"cve_count":17,"kev_count":17,"has_kev":18},"14.1",{"version":75,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-12.35",{"version":77,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-43.56",{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-47.46",{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-47.48",{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-8.50","Netscaler Application Delivery Controller by Citrix is a technology product with 33 tracked versions and 26 known security vulnerabilities including 7 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},{"version":73,"cve_count":17,"kev_count":17,"has_kev":18},{"version":75,"cve_count":17,"kev_count":17,"has_kev":18},{"version":77,"cve_count":17,"kev_count":17,"has_kev":18},{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},[120,128,135,141,147,151,156,162,166,171],{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"cvssVersion":125,"severity":126,"isKev":4,"epssScore":127},"CVE-2023-4966","Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.","2023-10-10",9.4,"v3.1","Critical",0.99999,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"cvssVersion":125,"severity":133,"isKev":4,"epssScore":134},"CVE-2025-5777","Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server","2025-06-17",7.5,"High",0.99897,{"cveId":136,"description":137,"publishedDate":138,"cvssScore":139,"cvssVersion":125,"severity":126,"isKev":4,"epssScore":140},"CVE-2023-3519","Unauthenticated remote code execution","2023-07-19",9.8,0.99445,{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"cvssVersion":125,"severity":133,"isKev":4,"epssScore":146},"CVE-2023-6549","Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read\n","2024-01-17",8.2,0.57633,{"cveId":148,"description":149,"publishedDate":12,"cvssScore":139,"cvssVersion":125,"severity":126,"isKev":4,"epssScore":150},"CVE-2025-7775","Memory overflow vulnerability leading to Remote Code Execution and\u002For Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX",0.18973,{"cveId":152,"description":153,"publishedDate":154,"cvssScore":139,"cvssVersion":125,"severity":126,"isKev":4,"epssScore":155},"CVE-2025-6543","Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server","2025-06-25",0.09756,{"cveId":157,"description":158,"publishedDate":159,"cvssScore":132,"cvssVersion":160,"severity":133,"isKev":18,"epssScore":161},"CVE-2018-6810","Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request.","2018-03-06","v3.0",0.04602,{"cveId":163,"description":164,"publishedDate":159,"cvssScore":139,"cvssVersion":160,"severity":126,"isKev":18,"epssScore":165},"CVE-2018-6809","NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system.",0.04375,{"cveId":167,"description":168,"publishedDate":131,"cvssScore":169,"cvssVersion":125,"severity":133,"isKev":18,"epssScore":170},"CVE-2025-5349","Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway",8.8,0.03653,{"cveId":172,"description":173,"publishedDate":174,"cvssScore":139,"cvssVersion":160,"severity":126,"isKev":18,"epssScore":175},"CVE-2016-2071","Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands.","2016-02-17",0.03356,[177,181,185,189,193,201,205],{"cveId":148,"description":149,"publishedDate":12,"cvssScore":139,"severity":126,"isKev":4,"epssScore":150,"cisaVulnName":178,"cisaDateAdded":12,"cisaShortDescription":179,"cisaRequiredAction":180},"Citrix NetScaler Memory Overflow Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and\u002For denial of service.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"severity":133,"isKev":4,"epssScore":134,"cisaVulnName":182,"cisaDateAdded":183,"cisaShortDescription":184,"cisaRequiredAction":180},"Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","2025-07-10","Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.",{"cveId":152,"description":153,"publishedDate":154,"cvssScore":139,"severity":126,"isKev":4,"epssScore":155,"cisaVulnName":186,"cisaDateAdded":187,"cisaShortDescription":188,"cisaRequiredAction":180},"Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","2025-06-30","Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.",{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"severity":133,"isKev":4,"epssScore":146,"cisaVulnName":190,"cisaDateAdded":144,"cisaShortDescription":191,"cisaRequiredAction":192},"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":194,"description":195,"publishedDate":144,"cvssScore":196,"severity":197,"isKev":4,"epssScore":198,"cisaVulnName":199,"cisaDateAdded":144,"cisaShortDescription":200,"cisaRequiredAction":192},"CVE-2023-6548","Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.",5.5,"Medium",0.03191,"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.",{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"severity":126,"isKev":4,"epssScore":127,"cisaVulnName":190,"cisaDateAdded":202,"cisaShortDescription":203,"cisaRequiredAction":204},"2023-10-18","Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.","Apply mitigations and kill all active and persistent sessions per vendor instructions [https:\u002F\u002Fwww.netscaler.com\u002Fblog\u002Fnews\u002Fcve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway\u002F] OR discontinue use of the product if mitigations are unavailable.",{"cveId":136,"description":137,"publishedDate":138,"cvssScore":139,"severity":126,"isKev":4,"epssScore":140,"cisaVulnName":199,"cisaDateAdded":138,"cisaShortDescription":206,"cisaRequiredAction":192},"Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.",{"title":208,"metaDescription":209,"keywords":210,"structuredData":211},"Netscaler Application Delivery Controller by Citrix - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Netscaler Application Delivery Controller by Citrix covering 33 versions with 26 tracked vulnerabilities including 4 critical and 2 high-severity issues and 7 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Netscaler Application Delivery Controller vulnerabilities, Netscaler Application Delivery Controller security, Netscaler Application Delivery Controller CVE, Citrix Netscaler Application Delivery Controller, Netscaler Application Delivery Controller threat intelligence, Citrix security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Netscaler Application Delivery Controller KEV, Netscaler Application Delivery Controller exploited vulnerabilities",{"@context":212,"@type":213,"name":214,"description":209,"url":215,"manufacturer":216,"applicationCategory":220,"softwareVersion":221,"mainEntity":222},"https:\u002F\u002Fschema.org","SoftwareApplication","Netscaler Application Delivery Controller","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcitrix\u002Fnetscaler_application_delivery_controller",{"@type":217,"name":218,"url":219},"Organization","Citrix","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcitrix","Security Software","33 versions tracked",{"@type":223,"name":224,"description":225,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Netscaler Application Delivery Controller Security Vulnerabilities","Security vulnerabilities affecting Netscaler Application Delivery Controller by Citrix",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":227,"apiVersion":228},"2026-10-28T13:31:57.866Z","3.0",[230],{"product":231,"cves":232},"netscaler_application_delivery_controller_firmware",29,{"rows":234,"total":11,"capped":18,"failed":17},[235,242,249,255,263,267,275],{"cveId":148,"name":178,"severity":126,"cvss":139,"added":12,"epss":150,"published":236,"ranges":237,"checked":4,"hits":241,"covers":18},"2025-08-26T13:15:32.87",[238,239,240],"12.1 to before 12.1-55.330","13.1 to before 13.1-59.22","14.1 to before 14.1-47.48",[],{"cveId":129,"name":182,"severity":133,"cvss":132,"added":183,"epss":134,"published":243,"ranges":244,"checked":4,"hits":248,"covers":18},"2025-06-17T13:15:21.523",[245,246,247],"12.1 to before 12.1-55.328","13.1 to before 13.1-58.32","14.1 to before 14.1-43.56",[],{"cveId":152,"name":186,"severity":126,"cvss":139,"added":187,"epss":155,"published":250,"ranges":251,"checked":4,"hits":254,"covers":18},"2025-06-25T13:15:27.293",[252,253],"13.1 to before 13.1-59.19","14.1 to before 14.1-47.46",[],{"cveId":142,"name":190,"severity":133,"cvss":145,"added":144,"epss":146,"published":256,"ranges":257,"checked":4,"hits":262,"covers":18},"2024-01-17T21:15:11.69",[258,259,260,261],"12.1 to before 12.1-55.302","13.0 to before 13.0-92.21","13.1 to before 13.1-51.15","14.1 to before 14.1-12.35",[],{"cveId":194,"name":199,"severity":197,"cvss":196,"added":144,"epss":198,"published":264,"ranges":265,"checked":4,"hits":266,"covers":18},"2024-01-17T20:15:50.627",[258,259,260,261],[],{"cveId":121,"name":190,"severity":126,"cvss":124,"added":202,"epss":127,"published":268,"ranges":269,"checked":4,"hits":274,"covers":18},"2023-10-10T14:15:10.977",[270,271,272,273],"12.1 to before 12.1-55.300","13.0 to before 13.0-92.19","13.1 to before 13.1-49.15","14.1 to before 14.1-8.50",[],{"cveId":136,"name":199,"severity":126,"cvss":139,"added":138,"epss":140,"published":276,"ranges":277,"checked":4,"hits":281,"covers":18},"2023-07-19T18:15:11.513",[278,279,280],"12.1 to before 12.1-55.297","13.0 to before 13.0-91.13","13.1 to before 13.1-49.13",[]]