Citrix scan is improperly identifing non-vulnerable systems as vulnerable.

[merriry]

We are running a FIPS version of the netscaler. the non-vulnerable version for FIPS is:
13.1-37.241

In table you are considering that version vulnerable.

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938

Affected Versions
The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities:

NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-47.48
NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-59.22
NetScaler ADC 13.1-FIPS and NDcPP BEFORE 13.1-37.241-FIPS and NDcPP
NetScaler ADC 12.1-FIPS and NDcPP BEFORE 12.1-55.330-FIPS and NDcPP