CVE-2025-12101: ADC 14.1 to before 56.73, 13.1 to before 60.32, 13.1-FIPS and NDcPP to before 37.250, 12.1-FIPS and NDcPP to before…

Affected technology

ADC · 14.1 to before 56.73, 13.1 to before 60.32, 13.1-FIPS and NDcPP to before 37.250, 12.1-FIPS and NDcPP to before 55.333
NetScaler

Gateway · 14.1 to before 56.73, 13.1 to before 60.32, 13.1-FIPS and NDcPP to before 37.250, 12.1-FIPS and NDcPP to before 55.333
NetScaler

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Active user interaction

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 5.9/10) rates confidentiality impact as high; integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.