CVE-2017-14602

A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.

• CWE-287

• http://www.securityfocus.com/bid/100980Third Party Advisory, VDB Entry
• https://support.citrix.com/article/CTX227928Mitigation, Patch, Vendor Advisory
• https://support.citrix.com/article/CTX228091
• http://www.securityfocus.com/bid/100980Third Party Advisory, VDB Entry
• https://support.citrix.com/article/CTX227928Mitigation, Patch, Vendor Advisory
• https://support.citrix.com/article/CTX228091

Published

Sep 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14595In Joomla! before 3.8.0, a logic bug in a SQL query could le…
• CVE-2017-14596In Joomla! before 3.8.0, inadequate escaping in the LDAP aut…
• CVE-2017-14597AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XS…
• CVE-2017-1460IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue…
• CVE-2017-14600Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injecti…
• CVE-2017-14601Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL inject…
• CVE-2017-14603In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14…
• CVE-2017-14604GNOME Nautilus before 3.23.90 allows attackers to spoof a fi…6.5
• CVE-2017-14607In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw relat…
• CVE-2017-14608In LibRaw through 0.18.4, an out of bounds read flaw related…
• CVE-2017-14609The server daemons in Kannel 1.5.0 and earlier create a PID …
• CVE-2017-1461IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vul…