Approved changes feed: RSS · Atom

cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*

part: a version: 10.5 update: *

VendorCitrix (d4086e08-6d3e-5a9c-9da4-36397da0fc58)
ProductNetscaler (4877045f-9691-5811-87dd-c6918d11a4e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-2072 vulnerable 2026-06-08 05:07:32.790905 Details available
The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Published: 2016-02-17T15:00:00.000Z
Updated: 2024-08-05T23:17:50.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2071 vulnerable 2026-06-08 05:07:32.787965 Details available
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands.
Published: 2016-02-17T15:00:00.000Z
Updated: 2024-08-05T23:17:50.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2841 vulnerable 2026-06-08 05:06:36.017952 Details available
Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the application/octet-stream and text/xml Content-Types.
Published: 2015-04-03T14:00:00.000Z
Updated: 2024-08-06T05:24:38.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2840 vulnerable 2026-06-08 05:06:36.017674 Details available
Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to inject arbitrary web script or HTML via the searchQuery parameter.
Published: 2015-04-03T14:00:00.000Z
Updated: 2024-08-06T05:24:38.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2839 vulnerable 2026-06-08 05:06:36.017354 Details available
The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix.
Published: 2015-04-03T14:00:00.000Z
Updated: 2024-08-06T05:24:38.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2838 vulnerable 2026-06-08 05:06:36.016941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.