Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-8424

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a0b2a89fea4240ee6455fcb3b021c125bdce4c052bc593a8f55c332491e37fbb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"ADC","vendor":"NetScaler","versions":[{"lessThan":"47.48","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"59.22","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"37.241","status":"affected","version":"13.1 FIPS and NDcPP","versionType":"patch"},{"lessThan":"55.330","status":"affected","version":"12.1 FIPS and NDcPP","versionType":"patch"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:042444d62d7a5337583c36a5bed9ea9a1b1e40bcf40e417df907f384627fc5bd · sha256:7370a579927d3cd1… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Gateway","vendor":"NetScaler","versions":[{"lessThan":"47.48","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"59.22","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"37.241","status":"affected","version":"13.1 FIPS and NDcPP","versionType":"patch"},{"lessThan":"55.330","status":"affected","version":"12.1 FIPS and NDcPP","versionType":"patch"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:042444d62d7a5337583c36a5bed9ea9a1b1e40bcf40e417df907f384627fc5bd · sha256:7370a579927d3cd1… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"ADC","vendor":"NetScaler","versions":[{"lessThan":"47.48","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"59.22","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"37.241","status":"affected","version":"13.1 FIPS and NDcPP","versionType":"patch"},{"lessThan":"55.330","status":"affected","version":"12.1 FIPS and NDcPP","versionType":"patch"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:042444d62d7a5337583c36a5bed9ea9a1b1e40bcf40e417df907f384627fc5bd · sha256:7370a579927d3cd1… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"Gateway","vendor":"NetScaler","versions":[{"lessThan":"47.48","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"59.22","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"37.241","status":"affected","version":"13.1 FIPS and NDcPP","versionType":"patch"},{"lessThan":"55.330","status":"affected","version":"12.1 FIPS and NDcPP","versionType":"patch"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:042444d62d7a5337583c36a5bed9ea9a1b1e40bcf40e417df907f384627fc5bd · sha256:7370a579927d3cd1… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","baseScore":8.7,"baseSeverity":"HIGH","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"…
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:042444d62d7a5337583c36a5bed9ea9a1b1e40bcf40e417df907f384627fc5bd · sha256:7370a579927d3cd1… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-1284","description":"CWE-1284 Improper Validation of Specified Quantity in Input","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:042444d62d7a5337583c36a5bed9ea9a1b1e40bcf40e417df907f384627fc5bd · sha256:7370a579927d3cd1… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:042444d62d7a5337583c36a5bed9ea9a1b1e40bcf40e417df907f384627fc5bd · sha256:7370a579927d3cd1… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer