by Kastro
Paper/Archive/CVE-2024-6235

CVE-2024-6235

NetScaler NetScaler Console — Sensitive information disclosure

EPSS 21%public exploitCVSS 9.4
critical.is priorityof 100
58
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 97.6.976 × 2019.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Sensitive information disclosure in NetScaler Console

Affected

ProductAffectedFixed inSource
NetScaler Console14.1 – < 25.5325.53CNA
netscaler_console14.1 – < 25.5325.53CISA-ADP

Scores by source

Citrix (CNA)9.4CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refsupport.citrix.com/article/CTX677998