CVE-2025-4365

HIGH

Published Jun 17, 2025 Modified Aug 6, 2025 CWE-1284

Description

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

Is your site exposed to CVE-2025-4365?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness Type (CWE)

CWE-1284 CWE-1284

Affected Products

Vendor	Product	Versions
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_console	All
citrix	netscaler_sdx	13.1-49.13 — 13.1-58.32
citrix	netscaler_sdx	14.1-4.42 — 14.1-47.46

References

Advisories & Patches

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729

Frequently Asked Questions

What is CVE-2025-4365? +

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM) It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2025-4365? +

CVE-2025-4365 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-4365? +

CVE-2025-4365 affects products from citrix, specifically: netscaler_console, netscaler_sdx. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-4365? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-59252

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, …

CVE-2025-66660

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared …

CVE-2026-54890

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer …

CVE-2026-0428

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data …

CVE-2024-6768

A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows …

CVE-2026-59695

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet …