citrix Vulnerability Advisory Catalog

Total 356 security vulnerabilities recorded for citrix software and firmware.

← Back to All Vendors
CVE-2008-2300 UNKNOWN
Component: access_essentials

Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allow...

📅 2008-05-18
CVSS 6.5 Dossier →
CVE-2008-0356 UNKNOWN
Component: access_essentials

Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier...

📅 2008-01-18
CVSS 10.0 Dossier →
CVE-2007-6477 UNKNOWN
Component: web_interface

Cross-site scripting (XSS) vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to in...

📅 2007-12-20
CVSS 4.3 Dossier →
CVE-2007-6267 UNKNOWN
Component: edgesight_for_endpoints

Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly sto...

📅 2007-12-07
CVSS 2.1 Dossier →
CVE-2007-6193 UNKNOWN
Component: netscaler

The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers...

📅 2007-11-30
CVSS 5.0 Dossier →
CVE-2007-6192 UNKNOWN
Component: netscaler

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, whic...

📅 2007-11-30
CVSS 4.3 Dossier →
CVE-2007-6037 UNKNOWN
Component: netscaler

Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web ...

📅 2007-11-20
CVSS 4.3 Dossier →
CVE-2007-0011 UNKNOWN
Component: access_gateway

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL,...

📅 2007-11-05
CVSS 5.0 Dossier →
CVE-2007-4018 UNKNOWN
Component: access_gateway

Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks vi...

📅 2007-07-26
CVSS 6.8 Dossier →
CVE-2007-4017 UNKNOWN
Component: access_gateway

Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote a...

📅 2007-07-26
CVSS 7.6 Dossier →
CVE-2007-4016 UNKNOWN
Component: access_gateway

Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows a...

📅 2007-07-26
CVSS 6.8 Dossier →
CVE-2007-4013 UNKNOWN
Component: access_gateway

Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis ...

📅 2007-07-26
CVSS 9.3 Dossier →
CVE-2007-3679 UNKNOWN
Component: access_gateway

The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Sta...

📅 2007-07-25
CVSS 4.3 Dossier →
CVE-2007-3625 UNKNOWN
Component: metaframe_presentation_server

The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of ser...

📅 2007-07-09
CVSS 5.0 Dossier →
CVE-2007-2850 UNKNOWN
Component: access_essentials

The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows ...

📅 2007-05-24
CVSS 10.0 Dossier →
CVE-2007-1196 UNKNOWN
Component: presentation_server_client

Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecifi...

📅 2007-03-02
CVSS 9.3 Dossier →
CVE-2007-0444 UNKNOWN
Component: metaframe

Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaF...

📅 2007-01-24
CVSS 7.2 Dossier →
CVE-2006-6573 UNKNOWN
Component: access_gateway

Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control (AAC) 4.2, when deployed on the Access G...

📅 2006-12-15
CVSS 6.0 Dossier →
CVE-2006-6572 UNKNOWN
Component: access_gateway

Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114...

📅 2006-12-15
CVSS 6.5 Dossier →
CVE-2006-6334 UNKNOWN
Component: presentation_server_client

Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote ma...

📅 2006-12-08
CVSS 6.8 Dossier →
CVE-2006-5861 UNKNOWN
Component: metaframe

The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows rem...

📅 2006-11-10
CVSS 5.0 Dossier →
CVE-2006-5821 UNKNOWN
Component: metaframe

Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 a...

📅 2006-11-10
CVSS 7.5 Dossier →
CVE-2006-4846 UNKNOWN
Component: access_gateway

Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authenti...

📅 2006-09-19
CVSS 5.1 Dossier →
CVE-2006-3779 UNKNOWN
Component: metaframe

Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote...

📅 2006-07-24
CVSS 6.5 Dossier →
Page 14 of 15 (356 Total Records)