CVE-2014-2881
Last modified
CVE-2014-2881 is a vulnerability of currently unknown severity. Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.. EPSS estimates a 1.85% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Netscaler Access Gateway Firmware | 9.3 |
| Citrix | Netscaler Application Delivery Controller Firmware | 10.1 |
| Citrix | Netscaler Application Delivery Controller | All versions |
| Citrix | Netscaler Access Gateway Firmware | <= 10.1.e |
| Citrix | Netscaler Application Delivery Controller Firmware | <= 9.3.e |
| Citrix | Netscaler Access Gateway | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-2881?
How severe is CVE-2014-2881?
How do I fix CVE-2014-2881?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-2872PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow…
- CVE-2014-2873PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does …
- CVE-2014-2874PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow…
- CVE-2014-2875The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha …6.1
- CVE-2014-2879Multiple cross-site scripting (XSS) vulnerabilities in Dell …
- CVE-2014-2880Open redirect vulnerability in the Oracle Identity Manager c…
- CVE-2014-2882Unspecified vulnerability in the management GUI in Citrix Ne…
- CVE-2014-2884The ProcessVolumeDeviceControlIrp function in Ntdriver.c in …
- CVE-2014-2885Multiple integer overflows in TrueCrypt 7.1a allow local use…
- CVE-2014-2886GKSu 2.0.2, when sudo-mode is not enabled, uses " (double qu…
- CVE-2014-2887Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-2888lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for R…
Are you affected by CVE-2014-2881?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST