Vulnerability · Published Feb 19, 2025 · Assigned by Citrix
CVE-2024-12284Authenticated privilege escalation
High 8.8
In plain English
A high-severity privilege mismanagement in Agent from NetScaler. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 13.3% (higher than 96% of all known vulnerabilities).
Severity (CVSS 4.0)8.8High
Exploit odds (30 days)13.3%top 3.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.
Affected products (as reported)
Weakness: CWE-269 · Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H