Threat database

28 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.7	EPSS 3.3%	CVE-2025-8424ADC · Improper Validation of Specified Quantity in Input High8.7EPSS 3.3%2025-08-26CVE Database V5CVE-2025-8424 Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access EPSS 3.3%Vulnerability NetScaler #cwe-1284 United States+11	CVE Database V5	2025-08-26
High	8.8	EPSS 8.2%	CVE-2025-7776ADC · Improper Restriction of Operations within the Bounds of a Memory Buffer High8.8EPSS 8.2%2025-08-26CVE Database V5CVE-2025-7776 Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it EPSS 8.2%Vulnerability NetScaler #cwe-119 Germany+9	CVE Database V5	2025-08-26
CriticalExploited in the wild	9.2	KEVEPSS 20%	CVE-2025-7775ADC · Improper Restriction of Operations within the Bounds of a Memory Buffer Critical9.2KEVEPSS 20%2025-08-26CVE Database V5CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX KEVEPSS 20%Vulnerability NetScaler #cwe-119 United States+11	CVE Database V5	2025-08-26
CriticalExploited in the wild	9.2	KEVEPSS 10%	CVE-2025-6543ADC · Improper Restriction of Operations within the Bounds of a Memory Buffer Critical9.2KEVEPSS 10%2025-06-25CVE Database V5CVE-2025-6543 Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server KEVEPSS 10%Vulnerability NetScaler #cwe-119 United States+12	CVE Database V5	2025-06-25
Medium	6.9	EPSS 9.7%	CVE-2025-4365Console · Improper Validation of Specified Quantity in Input Medium6.9EPSS 9.7%2025-06-17CVE Database V5CVE-2025-4365 Arbitrary file read in NetScaler Console and NetScaler SDX (SVM) EPSS 9.7%Vulnerability NetScaler #cwe-1284 Germany+9	CVE Database V5	2025-06-17
High	8.7	EPSS 6.2%	CVE-2025-5349ADC · Improper Validation of Specified Quantity in Input High8.7EPSS 6.2%2025-06-17CVE Database V5CVE-2025-5349 Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway EPSS 6.2%Vulnerability NetScaler #cwe-1284 United States+9	CVE Database V5	2025-06-17
CriticalExploited in the wild	9.3	KEVMirageEPSS 99%	CVE-2025-5777ADC · Out-of-bounds Read Critical9.3KEVMirageEPSS 99%2025-06-17CVE Database V5CVE-2025-5777 Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server KEVMirageEPSS 99%Vulnerability NetScaler #cwe-125	CVE Database V5	2025-06-17
High	8.8	EPSS 13%	CVE-2024-12284Console · Improper Privilege Management High8.8EPSS 13%2025-02-19CVE Database V5CVE-2024-12284 Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows. EPSS 13%Vulnerability NetScaler #cwe-269 United States+9	CVE Database V5	2025-02-19

Showing 21–28 of 28 results