Read the docs
TI-2015-04261 Aliases CVE-2015-5080GHSA-p2wp-rr75-f23g

The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and…

Priority MEDIUM 46CWE-77Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-77.

Summary

The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.

Why it matters now

EPSS 0.03938 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 27

CPEVersionsRoleVendor
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*10.1VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.120.1316.e:*:*:*:*:*:*:*10.1.120.1316.eVulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.121:*:*:*:*:*:*:*10.1.121VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.122:*:*:*:*:*:*:*10.1.122VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.123:*:*:*:*:*:*:*10.1.123VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.124:*:*:*:*:*:*:*10.1.124VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.125:*:*:*:*:*:*:*10.1.125VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.126:*:*:*:*:*:*:*10.1.126VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.127:*:*:*:*:*:*:*10.1.127VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.128:*:*:*:*:*:*:*10.1.128VulnerableCitrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.120.1316.e:*:*:*:*:*:*:* Versions 10.1.120.1316.e Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.121:*:*:*:*:*:*:* Versions 10.1.121 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.122:*:*:*:*:*:*:* Versions 10.1.122 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.123:*:*:*:*:*:*:* Versions 10.1.123 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.124:*:*:*:*:*:*:* Versions 10.1.124 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.125:*:*:*:*:*:*:* Versions 10.1.125 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.126:*:*:*:*:*:*:* Versions 10.1.126 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.127:*:*:*:*:*:*:* Versions 10.1.127 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.128:*:*:*:*:*:*:* Versions 10.1.128 Vulnerable ·Citrix
Show 17 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.129:*:*:*:*:*:*:*10.1.129VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*10.5VulnerableCitrix
cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*10.5eVulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.120.1316.e:*:*:*:*:*:*:*10.1.120.1316.eVulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.121:*:*:*:*:*:*:*10.1.121VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.122:*:*:*:*:*:*:*10.1.122VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.123:*:*:*:*:*:*:*10.1.123VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.124:*:*:*:*:*:*:*10.1.124VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.125:*:*:*:*:*:*:*10.1.125VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.126:*:*:*:*:*:*:*10.1.126VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.127:*:*:*:*:*:*:*10.1.127VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.128:*:*:*:*:*:*:*10.1.128VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.129:*:*:*:*:*:*:*10.1.129VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*10.5VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5.50.10:*:*:*:*:*:*:*10.5.50.10VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5.51.10:*:*:*:*:*:*:*10.5.51.10VulnerableCitrix
cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*10.5eVulnerableCitrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1.129:*:*:*:*:*:*:* Versions 10.1.129 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:* Versions 10.5 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:* Versions 10.5e Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.120.1316.e:*:*:*:*:*:*:* Versions 10.1.120.1316.e Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.121:*:*:*:*:*:*:* Versions 10.1.121 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.122:*:*:*:*:*:*:* Versions 10.1.122 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.123:*:*:*:*:*:*:* Versions 10.1.123 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.124:*:*:*:*:*:*:* Versions 10.1.124 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.125:*:*:*:*:*:*:* Versions 10.1.125 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.126:*:*:*:*:*:*:* Versions 10.1.126 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.127:*:*:*:*:*:*:* Versions 10.1.127 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.128:*:*:*:*:*:*:* Versions 10.1.128 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1.129:*:*:*:*:*:*:* Versions 10.1.129 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:* Versions 10.5 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5.50.10:*:*:*:*:*:*:* Versions 10.5.50.10 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5.51.10:*:*:*:*:*:*:* Versions 10.5.51.10 Vulnerable ·Citrix
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:* Versions 10.5e Vulnerable ·Citrix

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-5080
  2. 2026-10-03 Alias added: GHSA-p2wp-rr75-f23g

References

Other 2

  • TI-2018-04977 NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and… CVSS 3.0CRITICAL 9.8
  • TI-2015-04663 Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller… CVSS 2.0HIGH 10.0
  • TI-2014-05960 Unspecified vulnerability in the management interface in Citrix NetScaler Application… CVSS 2.0HIGH 7.5
  • TI-2014-02314 Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the… CVSS 2.0HIGH 10.0
  • TI-2013-05704 Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x… CVSS 2.0HIGH 10.0
  • TI-2014-02315 Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery… CVSS 2.0HIGH 10.0
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences