Browse CVEs

HIGH 10.0 CVE-2008-0356EPSS 73% Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlie… Access Essentials after 4.5 Fix from $1,9502008-01-18 MEDIUM 5.0 CVE-2007-6193 The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attacker… Netscaler Mitigation only Fix from $1,6002007-11-30 MEDIUM 5.0 CVE-2007-0011 The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL… Access Gateway Patch available Fix from $1,6002007-11-05 HIGH 9.3 CVE-2007-4013 Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis… Access Gateway after 4.5 Fix from $1,9502007-07-26 HIGH 7.6 CVE-2007-4017 Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote … Access Gateway Patch available Fix from $1,9502007-07-26 MEDIUM 6.8 CVE-2007-4016 Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows … Access Gateway after 4.5 Fix from $1,6002007-07-26 MEDIUM 6.8 CVE-2007-4018 Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks v… Access Gateway after 4.5 Fix from $1,6002007-07-26 MEDIUM 5.0 CVE-2007-3625 The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of se… Metaframe Presentation Server after 10.100 Fix from $1,6002007-07-09 HIGH 10.0 CVE-2007-2850 The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows… Access Essentials Patch available Fix from $1,9502007-05-24 HIGH 9.3 CVE-2007-1196 Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecif… Presentation Server Client after 9.200 Fix from $1,9502007-03-02 HIGH 7.2 CVE-2007-0444EPSS 14% Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and Meta… Metaframe Mitigation only Fix from $1,9502007-01-24 MEDIUM 6.5 CVE-2006-6572 Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 2006111… Access Gateway Patch available Fix from $1,6002006-12-15 MEDIUM 6.0 CVE-2006-6573 Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control (AAC) 4.2, when deployed on the Access … Access Gateway Patch available Fix from $1,6002006-12-15 MEDIUM 6.8 CVE-2006-6334EPSS 35% Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote m… Presentation Server Client after 9.200 Fix from $1,6002006-12-08 HIGH 7.5 CVE-2006-5821EPSS 5% Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 … Metaframe Patch available Fix from $1,9502006-11-10 MEDIUM 5.0 CVE-2006-5861 The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows re… Metaframe Patch available Fix from $1,6002006-11-10 MEDIUM 5.1 CVE-2006-4846 Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authent… Access Gateway Patch available Fix from $1,6002006-09-19 MEDIUM 6.5 CVE-2006-3779 Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remot… Metaframe Patch available Fix from $1,6002006-07-24 HIGH 7.5 CVE-2005-3652EPSS 16% Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name va… Ica Program Neighborhood Client Patch available Fix from $1,9502005-12-16 HIGH 7.5 CVE-2005-3134 Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changin… Metaframe No fix yet Fix from $1,9502005-10-04 HIGH 7.5 CVE-2004-1078 Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Se… Metaframe Client Patch available Fix from $1,9502004-04-26 MEDIUM 5.0 CVE-2004-1077 Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote serve… Metaframe Client Patch available Fix from $1,6002004-04-26 HIGH 7.5 CVE-2002-0504EPSS 8% Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers… Nfuse after 1.6 Fix from $1,9502002-08-12 MEDIUM 5.0 CVE-2002-0502 Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page. Nfuse Mitigation only Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0503 Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot… Nfuse Patch available Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0301 Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_… Nfuse Mitigation only Fix from $1,6002002-05-31 HIGH 7.5 CVE-2001-1192 Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, w… Ica Client Patch available Fix from $1,9502001-12-13 MEDIUM 5.0 CVE-2001-0716 Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (cras… Metaframe Patch available Fix from $1,6002001-12-06 HIGH 7.5 CVE-2001-0908 CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allow… Metaframe Mitigation only Fix from $1,9502001-11-21 MEDIUM 5.0 CVE-2001-0760 Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the… Nfuse No fix yet Fix from $1,6002001-10-18