Read the docs
TI-2025-03893 Aliases CVE-2025-4365GHSA-g6p8-9j37-76hf

NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read

Priority MEDIUM 43CWE-1284Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.09674 95th percentileScored 2026-11-07
Fix Fixed Console (NetScaler): 47.46, 58.32SDX (SVM) (NetScaler): 47.46, 58.32

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CitrixConsole14.1 to before 47.46; 13.1 to before 58.3247.46, 58.32Patch availableCNA
CitrixSDX (SVM)14.1 to before 47.46; 13.1 to before 58.3247.46, 58.32Patch availableCNA
  • Console VendorCitrix Affected 14.1 to before 47.46; 13.1 to before 58.32 Fixed in 47.46, 58.32 Patch available CNA
  • SDX (SVM) VendorCitrix Affected 14.1 to before 47.46; 13.1 to before 58.32 Fixed in 47.46, 58.32 Patch available CNA

CPE configurations NVD · 36

CPEVersionsRoleVendor
cpe:2.3:a:citrix:netscaler_console:13.1:build12.50:*:*:*:*:*:*13.1 build12.50VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build17.42:*:*:*:*:*:*13.1 build17.42VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build21.53:*:*:*:*:*:*13.1 build21.53VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build24.38:*:*:*:*:*:*13.1 build24.38VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build27.62:*:*:*:*:*:*13.1 build27.62VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build30.52:*:*:*:*:*:*13.1 build30.52VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build33.50:*:*:*:*:*:*13.1 build33.50VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build37.38:*:*:*:*:*:*13.1 build37.38VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build4.43:*:*:*:*:*:*13.1 build4.43VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build42.47:*:*:*:*:*:*13.1 build42.47VulnerableCitrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build12.50:*:*:*:*:*:* Versions 13.1 build12.50 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build17.42:*:*:*:*:*:* Versions 13.1 build17.42 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build21.53:*:*:*:*:*:* Versions 13.1 build21.53 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build24.38:*:*:*:*:*:* Versions 13.1 build24.38 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build27.62:*:*:*:*:*:* Versions 13.1 build27.62 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build30.52:*:*:*:*:*:* Versions 13.1 build30.52 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build33.50:*:*:*:*:*:* Versions 13.1 build33.50 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build37.38:*:*:*:*:*:* Versions 13.1 build37.38 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build4.43:*:*:*:*:*:* Versions 13.1 build4.43 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build42.47:*:*:*:*:*:* Versions 13.1 build42.47 Vulnerable ·Citrix
Show 26 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:citrix:netscaler_console:13.1:build45.61:*:*:*:*:*:*13.1 build45.61VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build48.47:*:*:*:*:*:*13.1 build48.47VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build49.13:*:*:*:*:*:*13.1 build49.13VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build50.23:*:*:*:*:*:*13.1 build50.23VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build51.14:*:*:*:*:*:*13.1 build51.14VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build52.19:*:*:*:*:*:*13.1 build52.19VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build53.22:*:*:*:*:*:*13.1 build53.22VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build53.24:*:*:*:*:*:*13.1 build53.24VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build54.29:*:*:*:*:*:*13.1 build54.29VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build55.29:*:*:*:*:*:*13.1 build55.29VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build56.18:*:*:*:*:*:*13.1 build56.18VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build57.26:*:*:*:*:*:*13.1 build57.26VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build58.21:*:*:*:*:*:*13.1 build58.21VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build9.60:*:*:*:*:*:*13.1 build9.60VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build12.34:*:*:*:*:*:*14.1 build12.34VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build17.38:*:*:*:*:*:*14.1 build17.38VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build21.60:*:*:*:*:*:*14.1 build21.60VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build25.53:*:*:*:*:*:*14.1 build25.53VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build25.56:*:*:*:*:*:*14.1 build25.56VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build29.63:*:*:*:*:*:*14.1 build29.63VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build34.43:*:*:*:*:*:*14.1 build34.43VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build38.53:*:*:*:*:*:*14.1 build38.53VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build4.42:*:*:*:*:*:*14.1 build4.42VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build43.50:*:*:*:*:*:*14.1 build43.50VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build8.50:*:*:*:*:*:*14.1 build8.50VulnerableCitrix
cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:*13.1-49.13 to before 13.1-58.32; 14.1-4.42 to before 14.1-47.46VulnerableCitrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build45.61:*:*:*:*:*:* Versions 13.1 build45.61 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build48.47:*:*:*:*:*:* Versions 13.1 build48.47 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build49.13:*:*:*:*:*:* Versions 13.1 build49.13 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build50.23:*:*:*:*:*:* Versions 13.1 build50.23 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build51.14:*:*:*:*:*:* Versions 13.1 build51.14 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build52.19:*:*:*:*:*:* Versions 13.1 build52.19 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build53.22:*:*:*:*:*:* Versions 13.1 build53.22 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build53.24:*:*:*:*:*:* Versions 13.1 build53.24 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build54.29:*:*:*:*:*:* Versions 13.1 build54.29 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build55.29:*:*:*:*:*:* Versions 13.1 build55.29 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build56.18:*:*:*:*:*:* Versions 13.1 build56.18 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build57.26:*:*:*:*:*:* Versions 13.1 build57.26 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build58.21:*:*:*:*:*:* Versions 13.1 build58.21 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build9.60:*:*:*:*:*:* Versions 13.1 build9.60 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build12.34:*:*:*:*:*:* Versions 14.1 build12.34 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build17.38:*:*:*:*:*:* Versions 14.1 build17.38 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build21.60:*:*:*:*:*:* Versions 14.1 build21.60 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build25.53:*:*:*:*:*:* Versions 14.1 build25.53 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build25.56:*:*:*:*:*:* Versions 14.1 build25.56 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build29.63:*:*:*:*:*:* Versions 14.1 build29.63 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build34.43:*:*:*:*:*:* Versions 14.1 build34.43 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build38.53:*:*:*:*:*:* Versions 14.1 build38.53 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build4.42:*:*:*:*:*:* Versions 14.1 build4.42 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build43.50:*:*:*:*:*:* Versions 14.1 build43.50 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build8.50:*:*:*:*:*:* Versions 14.1 build8.50 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_sdx:*:*:*:*:*:*:*:* Versions 13.1-49.13 to before 13.1-58.32; 14.1-4.42 to before 14.1-47.46 Vulnerable ·Citrix

Remediation

  • Fix · CNA Console (NetScaler) Fixed in 47.46, 58.32
  • Fix · CNA SDX (SVM) (NetScaler) Fixed in 47.46, 58.32

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-4365
  2. 2026-10-03 Alias added: GHSA-g6p8-9j37-76hf

References

Advisory 1

  • TI-2024-05782 Sensitive information disclosure in Citrix NetScaler Console CVSS 4.0CRITICAL 9.4
  • TI-2024-11394 Authenticated privilege escalation in Citrix Console CVSS 4.0HIGH 8.8
  • TI-2024-05783 Denial of service in Citrix NetScaler Console CVSS 4.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences