Citrix NetScaler vulnerabilities

10 CVEs affecting Citrix NetScaler, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-6186, published 2018-02-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2841, published 2015-04-03. Medium severity, CVSS 5.0. EPSS: 5.5% chance of exploitation in the next 30 days. Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the…
CVE-2007-6037, published 2007-11-20. Medium severity, CVSS 4.3. EPSS: 3.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter and…
CVE-2016-2071, published 2016-02-17. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to…
CVE-2018-6186, published 2018-02-01. High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days. Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot…
CVE-2015-2838, published 2015-04-03. Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators for requests that…
CVE-2015-2839, published 2015-04-03. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site scripting (XSS) attacks…
CVE-2015-2840, published 2015-04-03. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to inject arbitrary web script or HTML via the searchQuery…
CVE-2007-6193, published 2007-11-30. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers to obtain sensitive network configuration…
CVE-2016-2072, published 2016-02-17. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build…
CVE-2007-6192, published 2007-11-30. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain…