Cross Site Scripting (XSS) Identifies NetScaler Redirect VIP as Vulnerable

NetScaler Virtual IP VIP configured for redirect is being labeled as vulnerable by Security Scanners for Cross Site Scripting XSS...

Vulnerabilities fixed in NetScaler ADC and NetScaler Gateway

Citrix has fixed vulnerabilities in NetScaler ADC and NetScaler Gateway. A malicious party could exploit the vulnerabilities to obtain sensitive information or cause a denial-of-service attack. Citrix has released updates to fix the vulnerabilities. For more information, see:...

CVE-2023-4966

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

CVE-2023-4966

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

Information disclosure

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA ?virtual?server...

CVE-2023-4966 Unauthenticated sensitive information disclosure

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

CVE-2023-4966 Unauthenticated sensitive information disclosure

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

CVE-2023-4966

CVE-2023-4966 affects Citrix NetScaler ADC and NetScaler Gateway when configured as a Gateway or AAA virtual server. The issue stems from improper usage of snprintf/memory handling in the WebProc/auth pathways, causing memory disclosure via crafted responses and exposing sensitive data (e.g., aut...

Citrix Releases Security Updates for Multiple Products

Citrix has released security updates to address vulnerabilities affecting multiple products. A malicious cyber actor can exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Citrix security bulletins and apply...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2023-4966 and CVE-2023-4967

Multiple vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Affected Versions: The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities: NetScaler ADC and NetScaler...

Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials

A recently disclosed critical flaw in Citrix NetScaler ADC and Gateway devices is being exploited by threat actors to conduct a credential harvesting campaign. IBM X-Force, which uncovered the activity last month, said adversaries exploited "CVE-2023-3519 to attack unpatched NetScaler Gateways to...

PT-2023-5875

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway versions prior to the fix released on October 10, 2023 Description Citrix NetScaler ADC and NetScaler Gateway are affected by a critical information disclosure vulnerability CVE-2023-4966. This...

Citrix Systems ADC and NetScaler Gateway Security Vulnerability

Citrix Systems ADC and NetScaler Gateway is an application delivery controller from Citrix Systems. A security vulnerability exists in Citrix Systems ADC and NetScaler Gateway that stems from the presence of sensitive information disclosure...

PT-2023-6740 · Citrix · Citrix Netscaler Adc +1

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler ADC and NetScaler Gateway affected versions not specified Description: The issue is related to a Denial of Service condition in Citrix NetScaler ADC and NetScaler Gateway when configured as a Gateway or AAA Virtual Server. Th...

CVE-2023-4966

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Recent assessments: rbowes-r7 at October 24, 2023 6:01pm UTC reported: On October 10, 2023, Citrix posted an advisory about a...

How To: Update time zone on NetScaler

Change the default time zone of the NetScaler...

Reporting: "Error retrieving data source. Return code=257. Error message=Operation not permitted."

The message "Error retrieving data source. Return code = 257. Error message = Operation not permitted" is displayed when clicking Reporting on NetScaler:...

Cannot decompress firmware package with error "invalid compressed data--format violated"

Running command "tar -xvzf build-xx-xxnc64.tgz" in NetScaler shell to decompress firmware package, but it fails with error "invalid compressed data--format violated"...

How to Remove the ETag Field from the HTTP Response Header Using a Rewrite Policy

This article contains information about removing the ETag field from the HTTP response header using a rewrite policy and action on a NetScaler appliance. Background The rewrite policy and action are created using the Graphical User Interface GUI. Note : Disabling a feature on a NetScaler applianc...

Updating certificate on NetScaler failed with error

The following error occurs when updating a certificate on the NetScaler appliance. ERROR: Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XMLENCRYPT or XMLDECR...