CVE-2025-4365 - Vulnerability Details - OpenCVE

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729

History

Tue, 17 Jun 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 17 Jun 2025 12:45:00 +0000

Type	Values Removed	Values Added
Description		Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)
Title		NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read
Weaknesses		CWE-1284
References		https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729
Metrics		cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: Citrix

Published: 2025-06-17T12:38:10.318Z

Updated: 2025-06-17T13:49:08.982Z

Reserved: 2025-05-05T17:29:52.331Z

Link: CVE-2025-4365

Vulnrichment

Updated: 2025-06-17T13:49:03.560Z

NVD

Status : Awaiting Analysis

Published: 2025-06-17T13:15:20.690

Modified: 2025-06-17T20:50:23.507

Link: CVE-2025-4365

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-4365", "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "state": "PUBLISHED", "assignerShortName": "Citrix", "dateReserved": "2025-05-05T17:29:52.331Z", "datePublished": "2025-06-17T12:38:10.318Z", "dateUpdated": "2025-06-17T13:49:08.982Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Console", "vendor": "NetScaler", "versions": [{"lessThan": "47.46", "status": "affected", "version": "14.1", "versionType": "patch"}, {"lessThan": "58.32", "status": "affected", "version": "13.1", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "SDX (SVM)", "vendor": "NetScaler", "versions": [{"lessThan": "47.46", "status": "affected", "version": "14.1", "versionType": "patch"}, {"lessThan": "58.32", "status": "affected", "version": "13.1", "versionType": "patch"}]}], "datePublic": "2025-06-17T12:36:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><span style=\"background-color: transparent;\">Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)</span></b><br>"}], "value": "Arbitrary file read in\u00a0NetScaler Console and NetScaler SDX (SVM)"}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 6.9, "baseSeverity": "MEDIUM", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1284", "description": "CWE-1284 Improper Validation of Specified Quantity in Input", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "shortName": "Citrix", "dateUpdated": "2025-06-17T12:47:26.718Z"}, "references": [{"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729"}], "source": {"discovery": "UNKNOWN"}, "title": "NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-17T13:44:12.219691Z", "id": "CVE-2025-4365", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T13:49:08.982Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-4365", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-06-17T13:44:12.219691Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T13:49:03.560Z"}}], "cna": {"title": "NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NetScaler", "product": "Console", "versions": [{"status": "affected", "version": "14.1", "lessThan": "47.46", "versionType": "patch"}, {"status": "affected", "version": "13.1", "lessThan": "58.32", "versionType": "patch"}], "defaultStatus": "unaffected"}, {"vendor": "NetScaler", "product": "SDX (SVM)", "versions": [{"status": "affected", "version": "14.1", "lessThan": "47.46", "versionType": "patch"}, {"status": "affected", "version": "13.1", "lessThan": "58.32", "versionType": "patch"}], "defaultStatus": "unaffected"}], "datePublic": "2025-06-17T12:36:00.000Z", "references": [{"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Arbitrary file read in\u00a0NetScaler Console and NetScaler SDX (SVM)", "supportingMedia": [{"type": "text/html", "value": "<b><span style=\"background-color: transparent;\">Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)</span></b><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1284", "description": "CWE-1284 Improper Validation of Specified Quantity in Input"}]}], "providerMetadata": {"orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "shortName": "Citrix", "dateUpdated": "2025-06-17T12:47:26.718Z"}}}, "cveMetadata": {"cveId": "CVE-2025-4365", "state": "PUBLISHED", "dateUpdated": "2025-06-17T13:49:08.982Z", "dateReserved": "2025-05-05T17:29:52.331Z", "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "datePublished": "2025-06-17T12:38:10.318Z", "assignerShortName": "Citrix"}, "dataVersion": "5.1"}