CVE-2016-9028

Published: Oct 28, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header.

Affected (4)

Products: Citrix: Netscaler Application Delivery Controller Firmware

Citrix

1 product

Netscaler Application Delivery Controller Firmware

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Citrix Netscaler Application Delivery Controller Firmware	Up to 10.1
Citrix Netscaler Application Delivery Controller Firmware	Version 10.5
Citrix Netscaler Application Delivery Controller Firmware	Version 11.0
Citrix Netscaler Application Delivery Controller Firmware	Version 11.1