Citrix Netscaler Application Delivery Controller Firmware vulnerabilities

29 known vulnerabilities affecting citrix/netscaler_application_delivery_controller_firmware.

Total CVEs
29
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL6HIGH7MEDIUM16

Vulnerabilities

Page 2 of 2
CVE-2014-2881CRITICALCVSS 10.0v10.1≤ 9.3.e2014-05-01
CVE-2014-2881 [CRITICAL] CVE-2014-2881: Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI J Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.
nvd
CVE-2013-6941CRITICALCVSS 10.0v9.3\(1\)v9.3.e+2 more2014-03-11
CVE-2013-6941 [CRITICAL] CVE-2013-6941: Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3 Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors.
nvd
CVE-2013-6939MEDIUMCVSS 5.0v9.3\(1\)v9.3.e+2 more2014-03-11
CVE-2013-6939 [MEDIUM] CVE-2013-6939: Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3 Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."
nvd
CVE-2013-6940MEDIUMCVSS 5.0v9.3\(1\)v9.3.e+2 more2014-03-11
CVE-2013-6940 [MEDIUM] CWE-255 CVE-2013-6940: Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors.
nvd
CVE-2013-6942MEDIUMCVSS 6.8v9.3\(1\)v9.3.e+2 more2014-03-11
CVE-2013-6942 [MEDIUM] CWE-352 CVE-2013-6942: Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
nvd
CVE-2013-6944MEDIUMCVSS 4.3v9.3\(1\)v9.3.e+2 more2014-03-11
CVE-2013-6944 [MEDIUM] CWE-79 CVE-2013-6944: Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetSc Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2013-6943MEDIUMCVSS 5.0v9.3\(1\)v9.3.e+2 more2014-03-11
CVE-2013-6943 [MEDIUM] CWE-94 CVE-2013-6943: Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames.
nvd
CVE-2013-6938MEDIUMCVSS 5.0v9.3\(1\)v9.3.e+2 more2014-03-11
CVE-2013-6938 [MEDIUM] CVE-2013-6938: Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 bef Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to the "Virtual Machine Daemon."
nvd
CVE-2013-6011HIGHCVSS 7.8v10.0v10.0.e2013-10-04
CVE-2013-6011 [HIGH] CWE-20 CVE-2013-6011: Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a crafted request.
nvd