CVE-2014-8580

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-07 · updated 2026-06-17
Weakness: CWE-264

Description

Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access "network resources" of other users via unknown vectors.

Affected products

Citrix Netscaler Application Delivery Controller Firmware: 10.1.120.1316.e, 10.1.121, 10.1.122, 10.1.123, 10.1.124, 10.1.125 (+6)
Citrix Netscaler Gateway Firmware: 10.1.120.1316.e, 10.1.121, 10.1.122, 10.1.123, 10.1.124, 10.1.125 (+6)

References

http://secunia.com/advisories/62114
http://support.citrix.com/article/CTX200254
http://www.securitytracker.com/id/1031212
https://exchange.xforce.ibmcloud.com/vulnerabilities/98661
http://secunia.com/advisories/62114
http://support.citrix.com/article/CTX200254
http://www.securitytracker.com/id/1031212
https://exchange.xforce.ibmcloud.com/vulnerabilities/98661

Get alerted when CVE-2014-8580 or the next vulnerability affects your stack