Design/Logic Flaw

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

CVE-2016-9028

The CVE-2016-9028 issue affects Citrix NetScaler ADC (various 10.x/11.x builds) and enables an unauthenticated, remote attacker to steal session cookies by manipulating the Host header in an unauthorized redirect flow. Affected versions include 10.1 <135.8, 10.5 <61.11, 11.0 <65.31/65.35...

CVE-2016-9028

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

Citrix NetScaler ADC Unauthorized Redirect Vulnerability (CTX218361)

An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC that could allow a remote attacker to obtain session cookies of a redirected AAA user. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

CVE-2016-9028 - Unauthorized Redirect flaw in Citrix NetScaler ADC could result in session hijack

Description of Problem An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC in the AAA-TM flow that could allow a remote attacker to obtain session cookies of a redirected AAA user. This vulnerability does not impact NetScaler Gateway. The following vulnerability has...

How to connect to ADFS 3.0 from NetScaler ADC load balancer?

Use Case Use case 1 : Microsoft Active Directory Federation Services ADFS 3.0 which provides single sign-onaccess to enterprise applications, requires server name in client hello extension to identify theapplication to connect to. Use case 2 : Connect to a server with multiple applications runnin...

Citrix Systems NetScaler Application Delivery Controller and NetScaler Gateway Privilege Gain Vulnerability

Citrix Systems NetScaler ADC is a suite of service and application delivery solutions; NetScaler Gateway is a secure remote access solution. A security vulnerability exists in Citrix Systems NetScaler ADC and NetScaler Gateway that allows a remote attacker to gain privileges using NS Web GUI...

Multiple Cross-Site Scripting Vulnerabilities in Citrix NetScaler Application Delivery Controller and NetScaler Gateway

Citrix Systems NetScaler Service Delivery Appliance Service VM SVM, NetScaler Application Delivery Controller ADC, and NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition are Citrix Systems products. NetScaler Service Delivery Appliance SVM SVM, NetScaler Application Delivery...

Design/Logic Flaw

The Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow attackers to obtain credentials via the browser cach...

CVE-2015-7996

The Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow attackers to obtain credentials via the browser cach...

CVE-2015-7997

Multiple cross-site scripting XSS vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow...

CVE-2015-7997

CVE-2015-7997 covers multiple XSS flaws in the Nitro API of Citrix NetScaler ADC and NetScaler Gateway, exploitable via remote vectors on SD appliances. Affected versions include NetScaler ADC and Gateway before 10.1 Build 133.9, 10.5 before 58.11, and 10.5.e before 56.1505.e on NetScaler SVMs. T...

Citrix NetScaler ADC/NetScaler Gateway Cross-Site Scripting Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery.Citrix Access Gateway is a general purpose SSL VPN appliance. A cross-site scripting vulnerability exists in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions pri...

Citrix NetScaler ADC/NetScaler Gateway Elevation of Privilege Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery.Citrix Access Gateway is a general purpose SSL VPN appliance. Multiple vulnerabilities exist in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions prior to 10.1...

CVE-2015-6672

Cross-site scripting XSS vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML...

CVE-2015-5538

Citrix NetScaler ADC/NetScaler Gateway vuln (CVE-2015-5538) allows remote attackers to gain privileges via unknown vectors, affecting NetScaler ADC/Gateway versions prior to 10.1 Build 132.8, 10.5 prior to Build 57.7, and 10.5e prior to Build 56.1505.e. Descriptions consistently cite privilege es...

Code injection

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service reboot via unspecified vectors...

Citrix NetScaler ADC/NetScaler Gateway Denial of Service Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery.Citrix Access Gateway is a general purpose SSL VPN appliance. A security vulnerability exists in Citrix NetScaler ADC and NetScaler Gateway that could allow an unauthenticated, remote attacker to...

CVE-2014-7140

CVE-2014-7140 affects Citrix NetScaler ADC/Gateway 10.x (before 10.1-129.11 and 10.5 before 10.5-50.10). The vulnerability is an unspecified remote code execution via the management interface, with a CVSSv2 base score of 7.5 (HIGH). The root cause and exact exploit vectors are not detailed in the...

CVE-2014-2881

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors...