Description
Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetScaler | ADC | 14.1 – < 56.73, 13.1 – < 60.32, 13.1-FIPS and NDcPP – < 37.250, 12.1-FIPS and NDcPP – < 55.333 | 56.73 |
| NetScaler | Gateway | 14.1 – < 56.73, 13.1 – < 60.32, 13.1-FIPS and NDcPP – < 37.250, 12.1-FIPS and NDcPP – < 55.333 | 56.73 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 2 repositories
-
6h4ack/CVE-2025-12101-checker ★ 5 · Nov 12, 2025
Simple Python PoC to check Citrix NetScaler ADC/Gateway for CVE-2025-12101 reflected XSS on /cgi/logout using a crafted SAMLResponse + RelayState payload
-
boneys/CVE-2025-12101-Scanner-PoC ★ 0 · Nov 15, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Citrix NetScaler ADC & Gateway - Reflected XSS / Open Redirect javascript/cves/2025/CVE-2025-12101.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2025-2571 Citrix Systems ADC und NetScaler: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Nov 11, 2025