Medium severity · published Nov 11, 2025
CVE-2025-12101
Cross-Site Scripting (XSS)
5.9
CVSS
26.2%
EPSS
No
On KEV
Description
Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Exploitation
Is it being used?
Exploit prediction (EPSS)26.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
ADC · NetScaler
14.1 before 56.73; 13.1 before 60.32; 13.1-FIPS and NDcPP before 37.250; 12.1-FIPS and NDcPP before 55.333 · source: vendor
GA
Gateway · NetScaler
14.1 before 56.73; 13.1 before 60.32; 13.1-FIPS and NDcPP before 37.250; 12.1-FIPS and NDcPP before 55.333 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-12101
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-12101
support.citrix.com
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695486
More from ADC
9.8
CVE-2026-19490
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
9.8
CVE-2026-8452
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
9.8
CVE-2026-3055
Insufficient input validation leading to memory overread
9.8
CVE-2025-7775
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
9.8
CVE-2025-6543
Memory overflow vulnerability leading to unintended control flow and Denial of Service