Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
Exploit prediction scoring system (EPSS) score
EPSS Score 0.367
EPSS Ranking 97.1%
CVSS Severity
CVSS v3 Score 9.8
Proposed Action
Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.