CVE-2014-2881

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-01 · updated 2026-06-17

Description

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.

Affected products

Citrix Netscaler Access Gateway: all versions
Citrix Netscaler Access Gateway Firmware: through 10.1.e; 9.3 (and their updates)
Citrix NetScaler ADC: all versions
Citrix Netscaler Application Delivery Controller Firmware: through 9.3.e; 10.1 (and their updates)

References

http://support.citrix.com/article/CTX140651
http://www.securitytracker.com/id/1030180
http://support.citrix.com/article/CTX140651
http://www.securitytracker.com/id/1030180

Get alerted when CVE-2014-2881 or the next vulnerability affects your stack