Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges.
Max CVSS
9.0
EPSS Score
0.23%
Published
2018-02-01
Updated
2018-03-03
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands.
Max CVSS
10.0
EPSS Score
0.48%
Published
2016-02-17
Updated
2016-12-03
2 vulnerabilities found