CVE-2025-4365

Published: Jun 17, 2025Modified: Aug 6, 2025

6.9

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: secure@citrix.com (Secondary)

Description

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

Affected (37)

Products: Citrix: Netscaler Console, Netscaler Sdx

Citrix

2 products

Netscaler Console

Netscaler Sdx

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Citrix Netscaler Console	Version 13.1 build12.50
Citrix Netscaler Console	Version 13.1 build17.42
Citrix Netscaler Console	Version 13.1 build21.53
Citrix Netscaler Console	Version 13.1 build24.38
Citrix Netscaler Console	Version 13.1 build27.62
Citrix Netscaler Console	Version 13.1 build30.52
Citrix Netscaler Console	Version 13.1 build33.50
Citrix Netscaler Console	Version 13.1 build37.38
Citrix Netscaler Console	Version 13.1 build4.43
Citrix Netscaler Console	Version 13.1 build42.47
Citrix Netscaler Console	Version 13.1 build45.61
Citrix Netscaler Console	Version 13.1 build48.47
Citrix Netscaler Console	Version 13.1 build49.13
Citrix Netscaler Console	Version 13.1 build50.23
Citrix Netscaler Console	Version 13.1 build51.14
Citrix Netscaler Console	Version 13.1 build52.19
Citrix Netscaler Console	Version 13.1 build53.22
Citrix Netscaler Console	Version 13.1 build53.24
Citrix Netscaler Console	Version 13.1 build54.29
Citrix Netscaler Console	Version 13.1 build55.29
Citrix Netscaler Console	Version 13.1 build56.18
Citrix Netscaler Console	Version 13.1 build57.26
Citrix Netscaler Console	Version 13.1 build58.21
Citrix Netscaler Console	Version 13.1 build9.60
Citrix Netscaler Console	Version 14.1 build12.34
Citrix Netscaler Console	Version 14.1 build17.38
Citrix Netscaler Console	Version 14.1 build21.60
Citrix Netscaler Console	Version 14.1 build25.53
Citrix Netscaler Console	Version 14.1 build25.56
Citrix Netscaler Console	Version 14.1 build29.63
Citrix Netscaler Console	Version 14.1 build34.43
Citrix Netscaler Console	Version 14.1 build38.53
Citrix Netscaler Console	Version 14.1 build4.42
Citrix Netscaler Console	Version 14.1 build43.50
Citrix Netscaler Console	Version 14.1 build8.50
Citrix Netscaler Sdx	From 13.1-49.13 to 13.1-58.32
Citrix Netscaler Sdx	From 14.1-4.42 to 14.1-47.46

Related CWEs

CWE-1284

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (1)

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729

Source: secure@citrix.com

Vendor Advisory

Timeline

No history available yet.