← Back

Netscaler Application Delivery Controller

netscaler_application_delivery_controller

Vendor: Citrix • 30 CVEs

CVEs (30)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Citrix
2Netscaler Application Delivery Controller
Netscaler Gateway
Jun 17, 2026
Jul 19, 2023
N/A· v4
8.0 HIGH· v3
N/A· v2
Privilege Escalation to root administrator (nsroot)
1Citrix
2Netscaler Application Delivery Controller
Netscaler Gateway
Jun 17, 2026
Jul 19, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Reflected Cross-Site Scripting (XSS)
1Citrix
2Netscaler Application Delivery Controller
Netscaler Gateway
Jun 17, 2026
Jul 19, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Unauthenticated remote code execution
1Citrix
3Netscaler Application Delivery Controller
Netscaler GatewayNetscaler Sd Wan
Nov 21, 2024
Mar 1, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetS...Show more
Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.Show less
1Citrix
2Netscaler Application Delivery Controller
Netscaler Gateway
May 13, 2026
Aug 2, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13...Show more
The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Build 55.8007.e makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).Show less
1Citrix
4Netscaler Access Gateway
Netscaler Access Gateway FirmwareNetscaler Application Delivery Controller+1 more
May 6, 2026
Jul 16, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via v...Show more
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie.Show less
1Citrix
4Netscaler Access Gateway
Netscaler Access Gateway FirmwareNetscaler Application Delivery Controller+1 more
May 6, 2026
Jul 16, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126....Show more
Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
1Citrix
4Netscaler Access Gateway
Netscaler Access Gateway FirmwareNetscaler Application Delivery Controller+1 more
May 6, 2026
May 1, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to c...Show more
Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation.Show less
1Citrix
4Netscaler Access Gateway
Netscaler Access Gateway FirmwareNetscaler Application Delivery Controller+1 more
May 6, 2026
May 1, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x befo...Show more
Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.Show less
1Citrix
2Netscaler Application Delivery Controller
Netscaler Application Delivery Controller Firmware
Apr 29, 2026
Oct 4, 2013
N/A· v4
N/A· v3
7.8 HIGH· v2
Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a crafted request.