First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-12284

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
NetScaler	Console	>= 14.1, < 38.53; >= 13.1, < 56.18
NetScaler	Agent	>= 14.1, < 38.53; >= 13.1, < 56.18

References

https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_USVendor Advisory

Timeline

Published: Feb 20, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-122856.1The SEMA API plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘catid’ parameter in all versions up to, and inclu CVE-2024-122869.8MOBATIME Network Master Clock - DTS 4801 allows attackers to use SSH to gain initial access using default credentials.CVE-2024-122879.8The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is du CVE-2024-122886.1The Simple add pages or posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. CVE-2024-122895.9Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the initialization of the Boundary c CVE-2024-12295.3The SimpleShop plugin for WordPress is vulnerable to unauthorized disconnection from SimpleShop due to a missing capability check on the may CVE-2024-122906.1The Infility Global plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘set_type’ parameter in all versions up to,CVE-2024-122916.1The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.17. This is due CVE-2024-122924.0An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and s CVE-2024-122938.8The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.64.3. This is CVE-2024-122945.3The Last Viewed Posts by WPBeginner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin CVE-2024-122958.8The BoomBox Theme Extensions plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and incl

CVE-2024-12284: High severity, CVSS 8.8 | Vulnix