CVE-2025-4365/CVE-2024-12284: NetScaler Console/SDX Authenticated Arbitrary File Read/Write (FIXED)

During root cause analysis for the NetScaler Console vulnerability, CVE-2024-6235, Rapid7 discovered two high severity authenticated arbitrary file read and write vulnerabilities which were disclosed to the vendor in accordance with our disclosure policy. An Arbitrary File Read vulnerability...

CVE-2024-12284

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

Citrix Releases Security Fix for NetScaler Console Privilege Escalation Vulnerability

Citrix has released security updates for a high-severity security flaw impacting NetScaler Console formerly NetScaler ADM and NetScaler Agent that could lead to privilege escalation under certain conditions. The vulnerability, tracked as CVE-2024-12284 , has been given a CVSS v4 score of 8.8 out ...

CVE-2024-12284

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2024-12284

CVE-2024-12284 affects Citrix NetScaler Console and NetScaler Agent. The issue is an authenticated privilege escalation via an Arbitrary File Write (ZipSlip) vulnerability in the StyleBook import flow, where an archive is unpacked without validating paths, allowing writing as root and potentially...

CVE-2024-12284 Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...