CVE-2025-12101

Published Nov 11, 2025

Last updated 5 days ago

NetScaler ADC

NetScaler Gateway

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-12101 is a cross-site scripting (XSS) vulnerability affecting NetScaler ADC and NetScaler Gateway platforms. It enables attackers to inject malicious scripts into web pages served by affected NetScaler instances. If successfully exploited, this flaw could allow threat actors to execute arbitrary code in users' browsers, potentially leading to session hijacking, credential theft, or malware distribution. The vulnerability manifests when NetScaler is configured as a Gateway with specific virtual server types, including VPN, ICA Proxy, CVPN, or RDP Proxy, or when using AAA virtual servers for authentication. Organizations must verify their configurations to determine exposure. It is recommended to update NetScaler ADC and Gateway to the latest versions to fix the XSS vulnerability.

Description: Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Source: secure@citrix.com
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 5.9
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: MEDIUM

Weaknesses

secure@citrix.com: CWE-79

Hype score: Not currently trending

References