CVE-2024-5491

highpriority · track · 30EPSS 0.008 · 55 %ileDEEUNLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.76% (55th) EPSS

CVSS 7.5 · high

Is it mine?

28 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · ncsc_nl · cert_bund

EPSS · scored 2026-10-24

Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.2–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v4.07.2highCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.07.2highCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · secure@citrix.com

v4.05.2mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-404US

affected products (28)

Products and version ranges known to be affected.

NetScaler NetScaler ADC12.1-FIPS → 55.304enisa_euvdEU
NetScaler NetScaler ADC12.1-NDcPP → 55.304enisa_euvdEU
NetScaler NetScaler ADC13.0 → 92.31enisa_euvdEU
NetScaler NetScaler ADC13.1 → 53.17enisa_euvdEU
NetScaler NetScaler ADC13.1-FIPS → 37.183enisa_euvdEU
NetScaler NetScaler ADC14.1 → 25.53enisa_euvdEU
NetScaler NetScaler Gateway13.0 → 92.31enisa_euvdEU
NetScaler NetScaler Gateway13.1 → 53.17enisa_euvdEU
NetScaler NetScaler Gateway14.1 → 25.53enisa_euvdEU
netscaler_adcall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_adc:13.1-fips:*:*:*:*:*:*:*
netscaler_adcall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_adc:14.1:*:*:*:*:*:*:*
netscaler_adcall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_adc:12.1-fips:*:*:*:*:*:*:*
netscaler_adcall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_adc:12.1-ndcpp:*:*:*:*:*:*:*
netscaler_adcall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_adc:13.0:*:*:*:*:*:*:*
netscaler_adcall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_adc:13.1:*:*:*:*:*:*:*
netscaler_gatewayall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_gateway:14.1:*:*:*:*:*:*:*
netscaler_gatewayall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_gateway:13.0:*:*:*:*:*:*:*
netscaler_gatewayall versionsncsc_nlNLcpe:2.3:a:netscaler:netscaler_gateway:13.1:*:*:*:*:*:*:*
citrix netscaler application delivery controllerall versionsncsc_nlNLcpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*
citrix netscaler gatewayall versionsncsc_nlNLcpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*

showing 20 of 28

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2024-0288Kwetsbaarheden verholpen in Citrix Workspace, NetScaler ADC en NetScaler GatewayNL2024-07-10csaf · ncsc_nlNL
Cirtix heeft een aantal kwetsbaarheden verholpen in Workspace, NetScaler ADC en NetScaler Gateway
WID-SEC-W-2024-1577Citrix Systems ADC und Gateway: Mehrere SchwachstellenDeutsch2024-07-09csaf · cert_bundDE
Ein entfernter Angreifer kann mehrere Schwachstellen in Citrix Systems ADC und Gateway ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen und Sicherheitsmaßnahmen zu umgehen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd ncsc_nl cert_bund NVD CVE.org MITRE

published 2024-07-10modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan