What is CVE-2025-12101?

CVE-2025-12101 is a vulnerability in Netscaler Adc, classified under Cross-site Scripting. Published 2025-11-11.

Is CVE-2025-12101 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Netscaler Adc

CVE-2025-12101

Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Vulnerability class: XSS (Cross-Site Scripting)

Published 2025-11-11 · last modified 2026-06-17.

EPSS exploit prediction

EPSS: 0.254 (97.9th percentile), scored 2026-09-28.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 97.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.254 · newest: 0.254 · change: 0.000

Affected products

Netscaler Adc — versions 14.1, 13.1, 13.1-FIPS and NDcPP
Netscaler Gateway — versions 14.1, 13.1, 13.1-FIPS and NDcPP

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

support.citrix.com/support-home/kbsearch/article

Frequently asked questions

What is CVE-2025-12101?: CVE-2025-12101 is a vulnerability in Netscaler Adc, classified under Cross-site Scripting. Published 2025-11-11.
Is CVE-2025-12101 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.