Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway

Remote desktop takeover via phishing

Unauthorized access to Gateway user capabilities

User login brute force protection functionality bypass

Authenticated denial of service

Arbitrary file read in Citrix ADC and Citrix Gateway

Unauthenticated redirection to a malicious website

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-of-service from within the same Layer 2 network segment. Note that the attacker must be in the same Layer 2 network segment as the vulnerable appliance.