How many NetScaler ADC CVEs are in CISA KEV?

Yes — 5 of NetScaler ADC's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of NetScaler ADC are affected?

58 distinct NetScaler ADC versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in NetScaler ADC CVEs?

NetScaler ADC's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read), CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')).

How many critical NetScaler ADC vulnerabilities are there?

NetScaler ADC has 5 critical and 11 high-severity CVEs.

What is the average severity of NetScaler ADC CVEs?

The average CVSS base score across NetScaler ADC's scored CVEs is 8.3.

NetScaler ADC Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: NetScaler ADC vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

NetScaler ADC Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

NetScaler ADC has 19 published CVE records since 2024, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 8.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting NetScaler ADC, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of NetScaler ADC's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High11

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

5 of NetScaler ADC's CVEs are confirmed exploited in the wild.

Public exploits

5 of NetScaler ADC's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every NetScaler ADC version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

13.1 <= v < 63.186 CVEs
13.1 FIPS and NDcPP <= v < 37.2726 CVEs
14.1 <= v < 72.616 CVEs
14.1 FIPS <= v < 72.615 CVEs
12.1 FIPS and NDcPP <= v < 55.3303 CVEs
13.1 <= v < 59.223 CVEs
13.1 FIPS and NDcPP <= v < 37.2413 CVEs
14.1 <= v < 47.483 CVEs
13.1 <= v < 58.322 CVEs
13.1 <= v <= 63.212 CVEs
14.1 <= v < 43.562 CVEs

Common weakness types

The CWE weakness categories most often found in NetScaler ADC CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many NetScaler ADC CVEs were published each year.

2024

2025

2026

Other NetScaler products

Browse vulnerabilities for other products by NetScaler.

Gateway18 CVEs NetScaler Gateway5 CVEs NetScaler ADC4 CVEs Agent2 CVEs Console2 CVEs netscaler_console2 CVEs netscaler-adc_12.1-fips1 CVEs netscaler-adc_12.1-ndcpp

Frequently asked questions

Common questions about NetScaler ADC vulnerabilities.

How many CVEs does NetScaler ADC have?: NetScaler ADC has 19 published CVE records since 2024.
How many NetScaler ADC CVEs are in CISA KEV?: Yes — 5 of NetScaler ADC's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for NetScaler ADC vulnerabilities?: Yes — 5 of NetScaler ADC's CVEs have a known public exploit.
Which versions of NetScaler ADC are affected?: 58 distinct NetScaler ADC versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in NetScaler ADC CVEs?: NetScaler ADC's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read), CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')).
How many critical NetScaler ADC vulnerabilities are there?: NetScaler ADC has 5 critical and 11 high-severity CVEs.
What is the average severity of NetScaler ADC CVEs?: The average CVSS base score across NetScaler ADC's scored CVEs is 8.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track NetScaler ADC vulnerabilities

Monitor new NetScaler ADC vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing