5.9Medium

CVE-2025-12101Cross-Site Scripting (XSS)

NetScaler ADC; NetScaler Gateway Published: 2025-11-11 16:44 (1 year ago)

Description

Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Weakness (CWE): CWE-79

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
NetScaler	ADC	14.1 – < 56.73, 13.1 – < 60.32, 13.1-FIPS and NDcPP – < 37.250, 12.1-FIPS and NDcPP – < 55.333
NetScaler	Gateway	14.1 – < 56.73, 13.1 – < 60.32, 13.1-FIPS and NDcPP – < 37.250, 12.1-FIPS and NDcPP – < 55.333

References and patches

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695486

CVSS score

5.9Medium

Source: Citrix · CVSS 4.0

Attack vector: Network
Attack complexity: Low
Attack requirements: Present
Privileges required: None
User interaction: Active
Confidentiality: High
Integrity: Low
Availability: Low

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L

All scores (2)

cna	CVSS 4.0	5.9Medium
secure@citrix.com	CVSS 4.0	5.9Medium

EPSS (chance of exploitation in 30 days)

26.25%

higher than 98% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: partial

Timeline

ID reserved2025-10-23
Published2025-11-11 16:44
Reached IP-DB2026-10-24 23:57
Last updated2026-10-19 00:10

Assigned by (CNA): Citrix
NVD status: Deferred

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Description

Affected products and versions

References and patches

Recent CVEs in the same product — Citrix NetScaler ADC / Gateway

Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler