CVE-2025-4365

HIGH 7.5CVE-2025-4365 · Published 17/06/2025 · updated 17/06/2026

In short

CVE-2025-4365 is a HIGH (CVSS 7.5) vulnerability affecting netscaler console (citrix), netscaler sdx (citrix).
Chance of exploitation in the next 30 days (EPSS): 9.7%, higher than 95.5% of all vulnerabilities.
Fix: update to 13.1-58.32, 14.1-47.46 or later.

Package	Affected versions	Patched versions
netscaler console citrix	`= 13.1= 14.1`	No fix yet
netscaler sdx citrix	`≥ 13.1-49.13, < 13.1-58.32≥ 14.1-4.42, < 14.1-47.46`	`13.1-58.3214.1-47.46`

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

Running one of these products? Scan your site to see whether it exposes a vulnerable version.