Description
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie.
References (9)
Core 9
Core References
Various Sources x_refsource_misc
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-2_Citrix_NetScaler_Multiple_Vulnerabilities_v10.txt
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/94494
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030573
Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX140863
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/68537
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59942
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Jul/77
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030572
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/532802/100/0/threaded
Scores
EPSS
0.0098
EPSS Percentile
77.0%
Details
CWE
CWE-200
Status
published
Products (6)
citrix/netscaler_access_gateway
citrix/netscaler_access_gateway_firmware
9.3
citrix/netscaler_access_gateway_firmware
10.1
citrix/netscaler_application_delivery_controller
citrix/netscaler_application_delivery_controller_firmware
9.3
citrix/netscaler_application_delivery_controller_firmware
10.1
Published
Jul 16, 2014
Tracked Since
Feb 18, 2026