send a mail to
security@citrix.com and ask them.
The problem with the ADC is that most of the components are modified and complied by Citrix/NetScaler, so even with the version number being the there, the software isn't the same as the "original"
This is mostly seen with openssl