citrix Vulnerability Advisory Catalog

Total 356 security vulnerabilities recorded for citrix software and firmware.

← Back to All Vendors
Component: workspace

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

📅 2024-09-11
CVSS 7.3 Dossier →
Component: workspace

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin...

📅 2024-09-10
CVSS 6.1 Dossier →
Component: workspace

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

📅 2024-07-10
CVSS 7.8 Dossier →
Component: netscaler_agent

Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX...

📅 2024-07-10
CVSS 7.5 Dossier →
Component: virtual_apps_and_desktops

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps an...

📅 2024-07-10
CVSS 7.8 Dossier →
CVE-2024-6150 MEDIUM
Component: provisioning

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...

📅 2024-07-10
CVSS 4.3 Dossier →
CVE-2024-6149 MEDIUM
Component: workspace

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5...

📅 2024-07-10
CVSS 6.1 Dossier →
Component: workspace

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5...

📅 2024-07-10
CVSS 8.8 Dossier →
Component: netscaler_console

Sensitive information disclosure in NetScaler Console...

📅 2024-07-10
CVSS 8.8 Dossier →
CVE-2024-5492 MEDIUM
Component: netscaler_application_delivery_controller

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway...

📅 2024-07-10
CVSS 6.1 Dossier →
Component: netscaler_application_delivery_controller

Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler...

📅 2024-07-10
CVSS 7.5 Dossier →
CVE-2024-5661 MEDIUM
Component: xenserver

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause t...

📅 2024-06-13
CVSS 6.0 Dossier →
CVE-2024-2049 MEDIUM
Component: sd-wan_1000_firmware

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose l...

📅 2024-03-12
CVSS 6.5 Dossier →
CVE-2023-6184 MEDIUM
Component: virtual_apps_and_desktops

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting...

📅 2024-01-18
CVSS 5.0 Dossier →
Component: netscaler_application_delivery_controller

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Servic...

📅 2024-01-17
CVSS 8.2 Dossier →
CVE-2023-6548 MEDIUM
Component: netscaler_application_delivery_controller

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP ...

📅 2024-01-17
CVSS 5.5 Dossier →
Component: netscaler_application_delivery_controller

Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual ...

📅 2023-10-27
CVSS 8.2 Dossier →
CVE-2023-4966 CRITICAL
Component: netscaler_application_delivery_controller

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) ...

📅 2023-10-10
CVSS 9.4 Dossier →
Component: netscaler_application_delivery_controller

Privilege Escalation to root administrator (nsroot) ...

📅 2023-07-19
CVSS 8.0 Dossier →
Component: netscaler_application_delivery_controller

Reflected Cross-Site Scripting (XSS) ...

📅 2023-07-19
CVSS 8.3 Dossier →
CVE-2023-3519 CRITICAL
Component: netscaler_application_delivery_controller

Unauthenticated remote code execution...

📅 2023-07-19
CVSS 9.8 Dossier →
CVE-2023-24492 CRITICAL
Component: secure_access_client

A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute co...

📅 2023-07-11
CVSS 9.6 Dossier →
Component: secure_access_client

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an ...

📅 2023-07-11
CVSS 7.8 Dossier →
Page 2 of 15 (356 Total Records)