{"id":174259743,"date":"2024-07-09T07:09:27","date_gmt":"2024-07-09T15:09:27","guid":{"rendered":"https:\/\/www.netscaler.com\/blog\/?p=174259743"},"modified":"2024-11-12T05:09:35","modified_gmt":"2024-11-12T13:09:35","slug":"guidance-on-cves-that-may-affect-your-netscaler-deployment","status":"publish","type":"post","link":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/","title":{"rendered":"Guidance on CVEs that may affect your NetScaler deployment"},"content":{"rendered":"\n<p>On July 9, 2024, NetScaler released builds to fix the following CVEs:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>CVE-2024-6235 affects NetScaler Console (formerly NetScaler ADM) CVE-2024-6236, affects NetScaler Console, NetScaler Agent and NetScaler SVM, but not NetScaler VPX instances in NetScaler SDX<\/li>\n\n\n\n<li>CVE-2024-5491 and CVE-2024-5492 affects NetScaler (NetScaler ADC and NetScaler Gateway)<\/li>\n<\/ul>\n\n\n\n<p>Third-Party CVE:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>CVE-2024-6387 is third-party software&nbsp; vulnerability on the open source <a href=\"https:\/\/www.openssh.com\/security.html\" target=\"_blank\" rel=\"noreferrer noopener\">OpenSSH module<\/a> and affects NetScaler (NetScaler ADC and NetScaler Gateway)<\/li>\n<\/ul>\n\n\n\n<p><strong>All five of these CVEs apply only to customer-managed instances of NetScaler. <\/strong>If you have NetScaler-managed infrastructure, such as NetScaler Console Service, you do not need to take any action.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">CVE-2024-6235 and CVE-2024-6236<\/h2>\n\n\n\n<p>CVE-2024-6235, identified as a critical severity vulnerability, allows sensitive information disclosure.&nbsp; CVE-2024-6236, identified as a High severity vulnerability, allows for a denial of service attack.<\/p>\n\n\n\n<p>We discovered these vulnerabilities as a result of internal research and are unaware of any exploits in the wild.&nbsp;&nbsp;<\/p>\n\n\n\n<p>If you are using affected builds and have NetScaler Console exposed to the public internet, we strongly recommend that you <em>immediately<\/em> install the recommended updates (<a href=\"https:\/\/www.citrix.com\/downloads\/citrix-adc\/\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler ADC and NetScaler Gateway<\/a> and <a href=\"https:\/\/www.citrix.com\/downloads\/citrix-application-management\/\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler Console<\/a>). Please note that our <a href=\"https:\/\/docs.netscaler.com\/en-us\/netscaler-adc-secure-deployment\/best-practices-for-netscaler-console-security\" target=\"_blank\" rel=\"noreferrer noopener\">configuration guidance<\/a> is that you should <em>not<\/em> expose NetScaler Console or elements of it to the public internet. Rather, you should keep the NetScaler Console IP on a private network.<\/p>\n\n\n\n<p>While we cannot provide exact numbers, there are indications that the number of customer-managed versions of NetScaler Console exposed to the internet is small relative to the number of NetScaler ADCs deployed worldwide.<\/p>\n\n\n\n<p>However, even if NetScaler Console is not exposed externally, we still recommend installing the relevant update to protect against malicious insider threats.&nbsp;&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">CVE-2024-5491 and CVE-2024-5492<\/h2>\n\n\n\n<p>CVE-2024-5491, identified as a high-severity vulnerability, allows for a denial of service attack. CVE-2024-5492, identified as a&nbsp; medium-severity vulnerability, allows a&nbsp; remote unauthenticated attacker to redirect users to arbitrary or potentially malicious web sites.<\/p>\n\n\n\n<p>Please note that NetScaler version 12.1 (NetScaler ADC and NetScaler Gateway) is now end of life and is vulnerable. If you are using version 12.1, we recommend that you upgrade NetScaler to one of the supported versions that addresses the vulnerabilities.&nbsp;<\/p>\n\n\n\n<p>In both this communication and the related security bulletins for <a href=\"https:\/\/support.citrix.com\/article\/CTX677944\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler ADC<\/a> and <a href=\"https:\/\/support.citrix.com\/article\/CTX677998\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler Console<\/a>, please understand that we are sharing few technical details. We are intentional about not disclosing additional information because the details could aid malicious actors in the exploit.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">CVE-2024-6387<\/h2>\n\n\n\n<p><a href=\"https:\/\/support.citrix.com\/article\/CTX678072\/cloud-software-group-security-advisory-for-cve20246387\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2024-6387<\/a> is related to the <a href=\"https:\/\/www.netscaler.com\/blog\/news\/openssh-server-vulnerability-may-affect-netscaler-customers\/\">OpenSSH module that is used by many networking products including NetScaler<\/a>. Discovered externally by Qualys, this vulnerability is a signal handler race condition in OpenSSH\u2019s server (sshd) that allows unauthenticated remote code execution as root on glibc-based Linux systems. NetScaler is addressing this vulnerability as part of the same upgrade patch published below.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Update installation<\/h2>\n\n\n\n<p>Permanent fixes are available to download here:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.citrix.com\/downloads\/citrix-adc\/\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler ADC and NetScaler Gateway<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.citrix.com\/downloads\/citrix-application-management\/\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler Console<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Learn more and stay up to date<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Read the security bulletins for <a href=\"https:\/\/support.citrix.com\/article\/CTX677944\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler ADC<\/a> and <a href=\"https:\/\/support.citrix.com\/article\/CTX677998\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler Console<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/support.citrix.com\/user\/alerts\" target=\"_blank\" rel=\"noreferrer noopener\">Sign up for security bulletin notifications<\/a>&nbsp;<\/li>\n\n\n\n<li>Consult the best practices deployment guides for <a href=\"https:\/\/docs.netscaler.com\/en-us\/netscaler-adc-secure-deployment.html\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler<\/a> and <a href=\"https:\/\/docs.netscaler.com\/en-us\/netscaler-adc-secure-deployment\/best-practices-for-netscaler-console-security\" target=\"_blank\" rel=\"noreferrer noopener\">NetScaler Console<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.citrix.com\/about\/trust-center\/vulnerability-process.html\" target=\"_blank\" rel=\"noreferrer noopener\">Contact your NetScaler account representative to enroll in receiving pre-notification of security bulletins<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Improved vulnerability management with NetScaler Console&nbsp;<\/h2>\n\n\n\n<p>If you use NetScaler Console (formerly NetScaler Application Delivery Management), this is an ideal time to explore the security features it provides. The Security Advisory and Upgrade Advisory features can help reduce your time to patch, which can be critical in the current threat landscape:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/docs.netscaler.com\/en-us\/netscaler-console-service\/instance-advisory\/security-advisory.html\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Security Advisory<\/strong><\/a> protects your infrastructure by highlighting NetScaler ADCs with CVE exposure, scheduling on-demand vulnerability scans, and suggesting remediations.<\/li>\n\n\n\n<li><a href=\"https:\/\/docs.netscaler.com\/en-us\/netscaler-console-service\/instance-advisory\/upgrade-advisory.html\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Upgrade Advisory<\/strong><\/a> helps you with the lifecycle management of NetScaler ADCs.<\/li>\n\n\n\n<li><a href=\"https:\/\/community.citrix.com\/articles\/security\/netscaler-file-integrity-monitoring\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>File Integrity Monitoring<\/strong><\/a> ensures the integrity of the files on NetScaler ADCs by determining if changes have been made to your NetScaler build files.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>On July 9, 2024, NetScaler released builds to fix several CVEs that affect customer-managed instances of NetScaler.<\/p>\n","protected":false},"author":1003,"featured_media":174259744,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[8],"tags":[94],"class_list":{"0":"post-174259743","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"tag-netscaler-security-updates","9":"entry"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Guidance on CVEs That May Affect Your NetScaler Deployment<\/title>\n<meta name=\"description\" content=\"On July 9, 2024, NetScaler released builds to fix several CVEs that affect customer-managed instances of NetScaler.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Guidance on CVEs That May Affect Your NetScaler Deployment\" \/>\n<meta property=\"og:description\" content=\"On July 9, 2024, NetScaler released builds to fix several CVEs that affect customer-managed instances of NetScaler.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/\" \/>\n<meta property=\"og:site_name\" content=\"NetScaler Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-07-09T15:09:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-12T13:09:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Anil Shetty\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@NetScaler\" \/>\n<meta name=\"twitter:site\" content=\"@NetScaler\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anil Shetty\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/\"},\"author\":{\"name\":\"Anil Shetty\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/#\/schema\/person\/95208d92d61d26d754d258cd8dcc4f59\"},\"headline\":\"Guidance on CVEs that may affect your NetScaler deployment\",\"datePublished\":\"2024-07-09T15:09:27+00:00\",\"dateModified\":\"2024-11-12T13:09:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/\"},\"wordCount\":646,\"publisher\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg\",\"keywords\":[\"NetScaler security updates\"],\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/\",\"url\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/\",\"name\":\"Guidance on CVEs That May Affect Your NetScaler Deployment\",\"isPartOf\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg\",\"datePublished\":\"2024-07-09T15:09:27+00:00\",\"dateModified\":\"2024-11-12T13:09:35+00:00\",\"description\":\"On July 9, 2024, NetScaler released builds to fix several CVEs that affect customer-managed instances of NetScaler.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#primaryimage\",\"url\":\"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg\",\"contentUrl\":\"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg\",\"width\":2560,\"height\":1440,\"caption\":\"Protect your NetScaler deployment from vulnerabilities\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.netscaler.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Guidance on CVEs that may affect your NetScaler deployment\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/#website\",\"url\":\"https:\/\/www.netscaler.com\/blog\/\",\"name\":\"NetScaler Blog\",\"description\":\"Application delivery and security blog\",\"publisher\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.netscaler.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/#organization\",\"name\":\"NetScaler Blog\",\"url\":\"https:\/\/www.netscaler.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2023\/06\/NetScaler_Logo_2color_Negative.png\",\"contentUrl\":\"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2023\/06\/NetScaler_Logo_2color_Negative.png\",\"width\":2032,\"height\":486,\"caption\":\"NetScaler Blog\"},\"image\":{\"@id\":\"https:\/\/www.netscaler.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/NetScaler\",\"https:\/\/www.linkedin.com\/company\/netscaler\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.netscaler.com\/blog\/#\/schema\/person\/95208d92d61d26d754d258cd8dcc4f59\",\"name\":\"Anil Shetty\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/70d4ab8d6c35e47248907340933dd288ac3edc0e18c6a49d0f5144f9619c98d4?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/70d4ab8d6c35e47248907340933dd288ac3edc0e18c6a49d0f5144f9619c98d4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/70d4ab8d6c35e47248907340933dd288ac3edc0e18c6a49d0f5144f9619c98d4?s=96&d=mm&r=g\",\"caption\":\"Anil Shetty\"},\"url\":\"https:\/\/www.netscaler.com\/blog\/author\/anil-shettycloud-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Guidance on CVEs That May Affect Your NetScaler Deployment","description":"On July 9, 2024, NetScaler released builds to fix several CVEs that affect customer-managed instances of NetScaler.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/","og_locale":"en_US","og_type":"article","og_title":"Guidance on CVEs That May Affect Your NetScaler Deployment","og_description":"On July 9, 2024, NetScaler released builds to fix several CVEs that affect customer-managed instances of NetScaler.","og_url":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/","og_site_name":"NetScaler Blog","article_published_time":"2024-07-09T15:09:27+00:00","article_modified_time":"2024-11-12T13:09:35+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg","type":"image\/jpeg"}],"author":"Anil Shetty","twitter_card":"summary_large_image","twitter_creator":"@NetScaler","twitter_site":"@NetScaler","twitter_misc":{"Written by":"Anil Shetty","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#article","isPartOf":{"@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/"},"author":{"name":"Anil Shetty","@id":"https:\/\/www.netscaler.com\/blog\/#\/schema\/person\/95208d92d61d26d754d258cd8dcc4f59"},"headline":"Guidance on CVEs that may affect your NetScaler deployment","datePublished":"2024-07-09T15:09:27+00:00","dateModified":"2024-11-12T13:09:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/"},"wordCount":646,"publisher":{"@id":"https:\/\/www.netscaler.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#primaryimage"},"thumbnailUrl":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg","keywords":["NetScaler security updates"],"articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/","url":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/","name":"Guidance on CVEs That May Affect Your NetScaler Deployment","isPartOf":{"@id":"https:\/\/www.netscaler.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#primaryimage"},"image":{"@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#primaryimage"},"thumbnailUrl":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg","datePublished":"2024-07-09T15:09:27+00:00","dateModified":"2024-11-12T13:09:35+00:00","description":"On July 9, 2024, NetScaler released builds to fix several CVEs that affect customer-managed instances of NetScaler.","breadcrumb":{"@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#primaryimage","url":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg","contentUrl":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-scaled.jpg","width":2560,"height":1440,"caption":"Protect your NetScaler deployment from vulnerabilities"},{"@type":"BreadcrumbList","@id":"https:\/\/www.netscaler.com\/blog\/news\/guidance-on-cves-that-may-affect-your-netscaler-deployment\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.netscaler.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Guidance on CVEs that may affect your NetScaler deployment"}]},{"@type":"WebSite","@id":"https:\/\/www.netscaler.com\/blog\/#website","url":"https:\/\/www.netscaler.com\/blog\/","name":"NetScaler Blog","description":"Application delivery and security blog","publisher":{"@id":"https:\/\/www.netscaler.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.netscaler.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.netscaler.com\/blog\/#organization","name":"NetScaler Blog","url":"https:\/\/www.netscaler.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.netscaler.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2023\/06\/NetScaler_Logo_2color_Negative.png","contentUrl":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2023\/06\/NetScaler_Logo_2color_Negative.png","width":2032,"height":486,"caption":"NetScaler Blog"},"image":{"@id":"https:\/\/www.netscaler.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/NetScaler","https:\/\/www.linkedin.com\/company\/netscaler\/"]},{"@type":"Person","@id":"https:\/\/www.netscaler.com\/blog\/#\/schema\/person\/95208d92d61d26d754d258cd8dcc4f59","name":"Anil Shetty","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/70d4ab8d6c35e47248907340933dd288ac3edc0e18c6a49d0f5144f9619c98d4?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/70d4ab8d6c35e47248907340933dd288ac3edc0e18c6a49d0f5144f9619c98d4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/70d4ab8d6c35e47248907340933dd288ac3edc0e18c6a49d0f5144f9619c98d4?s=96&d=mm&r=g","caption":"Anil Shetty"},"url":"https:\/\/www.netscaler.com\/blog\/author\/anil-shettycloud-com\/"}]}},"featured_image_src":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-600x400.jpg","featured_image_src_square":"https:\/\/www.netscaler.com\/blog\/wp-content\/uploads\/2024\/07\/protect-netscaler-deployment-vulnerabilities-600x600.jpg","author_info":{"display_name":"Anil Shetty","author_link":"https:\/\/www.netscaler.com\/blog\/author\/anil-shettycloud-com\/"},"_links":{"self":[{"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/posts\/174259743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/users\/1003"}],"replies":[{"embeddable":true,"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/comments?post=174259743"}],"version-history":[{"count":0,"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/posts\/174259743\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/media\/174259744"}],"wp:attachment":[{"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/media?parent=174259743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/categories?post=174259743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.netscaler.com\/blog\/wp-json\/wp\/v2\/tags?post=174259743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}