60
CVE-2025-8424
—CVSS 4.0
8.7 high
EPSS
3%p86
Published
()
Modified
Description
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access
- Weakness
- CWE-1284
- Vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news9 stories
60
60
60
Citrix Patches Three Zero Days as One Sees Active Exploitation
60
Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025
60
60
60
60