CVE-2025-4365: medium-severity vulnerability in NetScaler Console
NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A vulnerability in NetScaler Console and NetScaler SDX allows attackers to read any file on the system without proper authorization. This could expose sensitive configuration files, credentials, and other confidential data.
CWE-1284 (Improper Validation of Specified Quantity in Input) enables arbitrary file read via insufficient input validation in NetScaler Console and SDX (SVM). The attack requires network access to the affected service; successful exploitation exposes sensitive files and system information accessible to the application context.
In the same product, most dangerous first.