Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-5492 Details

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.1 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492	CVE	Broken Link
https://support.citrix.com/external/article?articleUrl=CTX677944-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492	[email protected]	Vendor Advisory
https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492	[email protected]	Broken Link

CWE-ID	CWE Name	Source
CWE-601	URL Redirection to Untrusted Site ('Open Redirect')	CISA-ADP

Product	Versions
citrix netscaler application delivery controller	>= 12.1, < 12.1-55.304 >= 12.1, < 13.0-92.31 >= 13.1, < 13.1-37.183 >= 13.1, < 13.1-53.17 >= 14.1, < 14.1-25.53
CPE cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::fips:::* cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::ndcpp:::* cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::-:::* Remediation No remediation found in references.
citrix netscaler gateway	>= 12.1, < 13.0-92.31 >= 13.1, < 13.1-53.17 >= 14.1, < 14.1-25.53
CPE cpe:2.3:a:citrix:netscaler_gateway:::::::: Remediation No remediation found in references.

6 change records found show changes

QUICK INFO