VULNERABILITY INTELLIGENCE

CVE-2025-12101

EPSS probability26.25%
CISA KEVNot currently listed
Published2025-11-11
Last modified2026-10-18

Description

Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Weakness classification

  • secure@citrix.com: CWE-79

Primary references