Citrix: Security Vulnerabilities
Unauthenticated redirection to a malicious website
CVSS Score
6.1
EPSS Score
0.003
Published
2022-07-28
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.
CVSS Score
8.1
EPSS Score
0.2
Published
2022-06-16
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM.
CVSS Score
5.3
EPSS Score
0.009
Published
2022-06-16
An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM.
CVSS Score
7.1
EPSS Score
0.001
Published
2022-05-26
In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution.
CVSS Score
8.8
EPSS Score
0.021
Published
2022-04-19
A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient memory management when an affected device receives large amounts of traffic. An attacker could exploit this vulnerability by sending malicious traffic to an affected device. A successful exploit could allow the attacker to cause the device to crash, resulting in a DoS condition.
CVSS Score
5.5
EPSS Score
0.001
Published
2022-04-15
Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9
CVSS Score
6.1
EPSS Score
0.006
Published
2022-04-13
Reflected cross site scripting (XSS)
CVSS Score
6.1
EPSS Score
0.006
Published
2022-04-13
Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI
CVSS Score
2.7
EPSS Score
0.002
Published
2022-04-13
In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.
CVSS Score
8.8
EPSS Score
0.158
Published
2022-04-13