Browse CVEs

HIGH 7.1 CVE-2024-42423 Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogi… Workspace Mitigation only Fix from $1,9502024-09-10 MEDIUM 6.0 CVE-2024-5661 An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause … Xenserver Mitigation only Fix from $1,6002024-06-13 HIGH 7.5 CVE-2022-27508 Unauthenticated denial of service Application Delivery Controller No fix yet Fix from $1,9502023-01-26 HIGH 8.8 CVE-2021-44519 In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution. Xenmobile Server Mitigation only Fix from $1,9502022-04-19 HIGH 8.8 CVE-2021-44520EPSS 6% In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root p… Xenmobile Server Mitigation only Fix from $1,9502022-04-13 HIGH 7.2 CVE-2022-26151EPSS 8% Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection. Xenmobile Server Mitigation only Fix from $1,9502022-04-13 MEDIUM 6.5 CVE-2021-22920 A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Cit… Application Delivery Management Mitigation only Fix from $1,6002021-08-05 HIGH 8.8 CVE-2020-8207 Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic upd… Workspace Mitigation only Fix from $1,9502020-07-24 MEDIUM 5.3 CVE-2020-13998 Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA er… Xenapp Mitigation only Fix from $1,6002020-06-11 HIGH 7.5 CVE-2020-10111 Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a securit… Gateway Firmware No fix yet Fix from $1,9502020-03-06 MEDIUM 5.4 CVE-2020-10112 Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches sta… Gateway Firmware No fix yet Fix from $1,6002020-03-06 MEDIUM 5.3 CVE-2020-10110 Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensi… Gateway Firmware No fix yet Fix from $1,6002020-03-06 HIGH 7.8 CVE-2012-4606 Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vu… Xenserver Mitigation only Fix from $1,9502020-01-23 CRITICAL 9.8 CVE-2019-19781 KEVEPSS 100% An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. Application Delivery Controller Firmware Mitigation only Fix from $2,3002019-12-27 CRITICAL 9.8 CVE-2019-18225 An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before … Application Delivery Controller Firmware Mitigation only Fix from $2,3002019-10-21 HIGH 8.8 CVE-2019-17366 Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control. Application Delivery Management No fix yet Fix from $1,9502019-10-09 CRITICAL 9.1 CVE-2018-18571 An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patc… Xenmobile Server Mitigation only Fix from $2,3002019-06-05 CRITICAL 9.8 CVE-2018-14007EPSS 56% Citrix XenServer 7.1 and newer allows Directory Traversal. Xenserver No fix yet Fix from $2,3002018-08-15 CRITICAL 9.9 CVE-2016-9603 A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a V… Xenserver Mitigation only Fix from $2,3002018-07-27 MEDIUM 5.6 CVE-2018-3665 System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to … Xenserver Mitigation only Fix from $1,6002018-06-21 CRITICAL 9.8 CVE-2018-10653EPSS 7% There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server No fix yet Fix from $2,3002018-05-23 HIGH 8.1 CVE-2018-10654 There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server Mitigation only Fix from $1,9502018-05-23 CRITICAL 9.8 CVE-2018-10648 There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server Mitigation only Fix from $2,3002018-05-23 HIGH 7.8 CVE-2018-10650 There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server Mitigation only Fix from $1,9502018-05-23 HIGH 7.5 CVE-2018-10652 There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3. Xenmobile Server No fix yet Fix from $1,9502018-05-23 MEDIUM 6.1 CVE-2018-10649 There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3. Xenmobile Server Mitigation only Fix from $1,6002018-05-23 MEDIUM 6.1 CVE-2018-10651 There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Xenmobile Server Mitigation only Fix from $1,6002018-05-23 CRITICAL 9.8 CVE-2018-7218EPSS 6% The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.… Application Delivery Controller Firmware Mitigation only Fix from $2,3002018-05-17 CRITICAL 9.8 CVE-2018-6809 NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target syste… Netscaler Application Delivery Controller Firmware Mitigation only Fix from $2,3002018-03-06 HIGH 7.5 CVE-2018-6808 NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the … Netscaler Application Delivery Controller Firmware Mitigation only Fix from $1,9502018-03-06