CVE-2018-6810

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-06 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request.

Affected products

Citrix Netscaler Application Delivery Controller Firmware: 10.5, 11.0, 11.1, 12.0 (and their updates)
Citrix Netscaler Gateway Firmware: 10.5, 11.0, 11.1, 12.0 (and their updates)

References

http://www.securitytracker.com/id/1040440
https://support.citrix.com/article/CTX232161
http://www.securitytracker.com/id/1040440
https://support.citrix.com/article/CTX232161

Get alerted when CVE-2018-6810 or the next vulnerability affects your stack