CVE-2025-4365 MEDIUM

CVE-2025-4365: NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read

Vendor Netscaler

Product Console

Weakness CWE-1284

Published June 17, 2025

Last update June 17, 2025

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Adjacent

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

Key dates

02Disclosure timeline

June 17, 2025 CVE published

June 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-4365 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1284.html

Related vulnerabilities

Identifiers

CVE CVE-2025-4365

CWE CWE-1284

CVSS 6.9 / MEDIUM

Affected versions

Vendor Netscaler

Product Console

Affected ≥ 14.1 and < 47.46

Vendor Netscaler

Product Console

Affected ≥ 13.1 and < 58.32

Vendor Netscaler

Product SDX (SVM)

Affected ≥ 14.1 and < 47.46

Vendor Netscaler

Product SDX (SVM)

Affected ≥ 13.1 and < 58.32

CVE-2025-4365: NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read

01Description

02Disclosure timeline

03References

04Related CVE