Vulnerabilities > Citrix > Netscaler

DATE CVE VULNERABILITY TITLE RISK
2018-02-01 CVE-2018-6186 Server-Side Request Forgery (SSRF) vulnerability in Citrix Netscaler 12.0
Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account.
network
low complexity
citrix CWE-918
8.8
2016-02-17 CVE-2016-2072 7PK - Security Features vulnerability in Citrix Netscaler
The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
network
low complexity
citrix CWE-254
6.1
2016-02-17 CVE-2016-2071 Permissions, Privileges, and Access Controls vulnerability in Citrix Netscaler 10.5/10.5E/11.0
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands.
network
low complexity
citrix CWE-264
critical
9.8