Back to Database
Status published
Medium
CVE-2015-7996
The Nitro API in Citrix NetScaler Application Delivery Controller (ADC)...
Vulnerability Description
The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-7996
Credits & Attribution
No credits recorded in the NVD database.
More from citrix
View All →CVE-2022-26151
Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and...
High
7.2
CVE-2021-44520
In Citrix XenMobile Server through 10.12 RP9, there is an...
High
8.8
CVE-2021-44519
In Citrix XenMobile Server through 10.12 RP9, there is an...
High
8.8
CVE-2020-8983
An arbitrary file write issue exists in all versions of...
High
7.5
CVE-2020-8982
An unauthenticated arbitrary file read issue exists in all versions...
High
7.5
Affected Vendor
citrix
View all reports →Affected Software
netscaler application delivery controller firmware, netscaler service delivery appliance service vm, netscaler gateway firmware
Vulnerable Versions:
10.1, 10.5, 10.5e
Timeline
Official Publish:
November 17th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.