← CVE Intelligence

CVE-2025-12101

Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Affected (CNA)

Vendor / productVersions
NetScaler / ADCaffected 14.1 before 56.73; affected 13.1 before 60.32; affected 13.1-FIPS and NDcPP before 37.250; affected 12.1-FIPS and NDcPP before 55.333
NetScaler / Gatewayaffected 14.1 before 56.73; affected 13.1 before 60.32; affected 13.1-FIPS and NDcPP before 37.250; affected 12.1-FIPS and NDcPP before 55.333

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.