CVE-2025-4365

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-4365
Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:citrix:netscaler_console:13.1:build12.50:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build17.42:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build21.53:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build24.38:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build27.62:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build30.52:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build33.50:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build37.38:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build4.43:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build42.47:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build45.61:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build48.47:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build49.13:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build50.23:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build51.14:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build52.19:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build53.22:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build53.24:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build54.29:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build55.29:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build56.18:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build57.26:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build58.21:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build9.60:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build12.34:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build17.38:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build21.60:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build25.53:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build25.56:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build29.63:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build34.43:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build38.53:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build4.42:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build43.50:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build8.50:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*
History

06 Aug 2025, 17:50

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
First Time Citrix netscaler Sdx
Citrix
Citrix netscaler Console
References () https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729 - () https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729 - Vendor Advisory
CPE cpe:2.3:a:citrix:netscaler_console:13.1:build57.26:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build50.23:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build34.43:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build38.53:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build9.60:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build51.14:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build55.29:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build56.18:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build54.29:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build25.53:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build8.50:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build12.34:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build27.62:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build21.60:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build12.50:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build33.50:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build21.53:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build24.38:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build30.52:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build29.63:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build53.24:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build45.61:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build4.42:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build42.47:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build17.38:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build48.47:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build4.43:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build25.56:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build17.42:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build58.21:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build53.22:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build52.19:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:14.1:build43.50:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build37.38:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler_console:13.1:build49.13:*:*:*:*:*:*
Summary
  • (es) Lectura de archivos arbitrarios en NetScaler Console y NetScaler SDX (SVM)

17 Jun 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-17 13:15

Updated : 2025-08-06 17:50

NVD link : CVE-2025-4365

Mitre link : CVE-2025-4365

CVE.ORG link : CVE-2025-4365

JSON object : View

Products Affected

citrix

  • netscaler_console
  • netscaler_sdx
CWE
CWE-1284

Improper Validation of Specified Quantity in Input