Log In Get API Key

9.4Critical

CVE-2024-6235Sensitive information disclosure

NetScaler NetScaler Console; citrix netscaler_console Published: 2024-07-10 22:07 (2 years ago)

Description

Sensitive information disclosure in NetScaler Console

Weakness (CWE): CWE-287

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
citrix	netscaler_console	14.1 – < 25.53
NetScaler	NetScaler Console	14.1 – < 25.53

References and patches

https://support.citrix.com/article/CTX677998 Vendor Advisory

CPE matches (NVD) (1)

cpe:2.3:a:citrix:netscaler_console:*:*:*:*:*:*:*:* ≥ 14.1-4.42 < 14.1-25.53

CVSS score

9.4Critical

Source: Citrix · CVSS 4.0

Attack vector: Adjacent
Attack complexity: Low
Attack requirements: None
Privileges required: None
User interaction: None
Confidentiality: High
Integrity: High
Availability: High

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

All scores (3)

cna	CVSS 4.0	9.4Critical
secure@citrix.com	CVSS 4.0	9.4Critical
nvd	CVSS 3.1	8.8High

EPSS (chance of exploitation in 30 days)

21.17%

higher than 98% of all CVEs

CISA assessment (SSVC)

Exploitation: poc
Automatable: no
Technical impact: total

Timeline

ID reserved2024-06-21
Published2024-07-10 22:07
Reached IP-DB2026-10-24 23:55
Last updated2026-11-04 03:10

Assigned by (CNA): Citrix
NVD status: Analyzed

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time