CVE-2025-8424CWE-1284

Improper access control on the NetScaler Management Interface

High · published August 26, 2025

CVSS v4.0
8.7
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
EPSS
0.03341 · 88.6th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2025-08-26T13:11Z
EPSS history
Timeline
  • 26 AUG 13:11Z
    Improper access control on the NetScaler Management Interface
    cvelistv5