7.5

CVE-2025-4365: citrix netscaler_console

CVSS: 7.5v3.1HighAnalyzed
Published 17-06-2025Last modified 17-06-2025
Open JSON

Vulnerability summary

CVE-2025-4365 is a high (CVSS 7.5) vulnerability in citrix netscaler_console. EPSS estimates a 10.79% chance of exploitation in the next 30 days, higher than 95.8% of scored vulnerabilities.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (NVD)
EPSS score
10.79%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 17-06-2025
    PublishedVulnerability first disclosed.
  2. 17-06-2025
    Last modifiedVulnerability information updated.

Description

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

10.79%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.79% on 18-09-2026

18-09-202618-10-2026
EPSS score
10.79%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Citrix2 products
  • netscaler_console13.1:build12.50 | 13.1:build17.42 | 13.1:build21.53 | 13.1:build24.38 | 13.1:build27.62 | 13.1:build30.52 | 13.1:build33.50 | 13.1:build37.38 | 13.1:build4.43 | 13.1:build42.47 | 13.1:build45.61 | 13.1:build48.47 | 13.1:build49.13 | 13.1:build50.23 | 13.1:build51.14 | 13.1:build52.19 | 13.1:build53.22 | 13.1:build53.24 | 13.1:build54.29 | 13.1:build55.29 | 13.1:build56.18 | 13.1:build57.26 | 13.1:build58.21 | 13.1:build9.60 | 14.1:build12.34 | 14.1:build17.38 | 14.1:build21.60 | 14.1:build25.53 | 14.1:build25.56 | 14.1:build29.63 | 14.1:build34.43 | 14.1:build38.53 | 14.1:build4.42 | 14.1:build43.50 | 14.1:build8.50
  • netscaler_sdx_firmware≥ 13.1-49.13, < 13.1-58.32 | ≥ 14.1-4.42, < 14.1-47.46
Netscaler2 products
  • console≥ 14.1, < 47.46 | ≥ 13.1, < 58.32
  • sdx (svm)≥ 14.1, < 47.46 | ≥ 13.1, < 58.32

2 vendors · 4 products

References

1 links