citrix Vulnerability Advisory Catalog

Total 356 security vulnerabilities recorded for citrix software and firmware.

← Back to All Vendors
Component: virtual_apps_and_desktops

Users with only access to launch VDA applications can launch an unauthorized desktop ...

๐Ÿ“… 2023-07-10
CVSS 6.3 Dossier →
CVE-2023-24489 CRITICAL
Component: sharefile_storage_zones_controller

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated att...

๐Ÿ“… 2023-07-10
CVSS 9.8 Dossier →
Component: gateway

Cross site scripting vulnerabilityย in Citrix ADC and Citrix Gatewayโ€ฏย in allows and attacker to perform cross site scripting...

๐Ÿ“… 2023-07-10
CVSS 6.1 Dossier →
Component: application_delivery_controller

Arbitrary file readย in Citrix ADC and Citrix Gatewayโ€ฏ...

๐Ÿ“… 2023-07-10
CVSS 6.3 Dossier →
Component: workspace

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain acce...

๐Ÿ“… 2023-07-10
CVSS 5.5 Dossier →
Component: workspace

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix ...

๐Ÿ“… 2023-02-16
CVSS 7.8 Dossier →
Component: workspace

A malicious user can cause log files to be written to a directory that they do not have permission to write to....

๐Ÿ“… 2023-02-16
CVSS 5.5 Dossier →
Component: virtual_apps_and_desktops

A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citri...

๐Ÿ“… 2023-02-16
CVSS 7.8 Dossier →
Component: application_delivery_controller

Unauthenticated denial of service...

๐Ÿ“… 2023-01-26
CVSS 7.5 Dossier →
Component: application_delivery_controller_firmware

In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affe...

๐Ÿ“… 2022-12-26
CVSS 6.5 Dossier →
CVE-2022-27518 CRITICAL
Component: application_delivery_controller_firmware

Unauthenticated remote arbitrary code execution...

๐Ÿ“… 2022-12-13
CVSS 9.8 Dossier →
Component: gateway

User login brute force protection functionality bypass ...

๐Ÿ“… 2022-11-08
CVSS 5.3 Dossier →
CVE-2022-27510 CRITICAL
Component: gateway

Unauthorized access to Gateway user capabilities ...

๐Ÿ“… 2022-11-08
CVSS 9.8 Dossier →
Component: gateway

Unauthenticated redirection to a malicious website...

๐Ÿ“… 2022-07-28
CVSS 6.1 Dossier →
Component: application_delivery_management

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM....

๐Ÿ“… 2022-06-16
CVSS 5.3 Dossier →
Component: application_delivery_management

Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device ...

๐Ÿ“… 2022-06-16
CVSS 8.1 Dossier →
Component: gateway_plug-in

An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could ...

๐Ÿ“… 2022-05-26
CVSS 7.1 Dossier →
Component: xenmobile_server

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution....

๐Ÿ“… 2022-04-19
CVSS 8.8 Dossier →
Component: sd-wan_110_firmware

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI...

๐Ÿ“… 2022-04-13
CVSS 2.7 Dossier →
Component: sd-wan_110_firmware

Reflected cross site scripting (XSS)...

๐Ÿ“… 2022-04-13
CVSS 6.1 Dossier →
Component: storefront_server

Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

๐Ÿ“… 2022-04-13
CVSS 6.1 Dossier →
Component: xenmobile_server

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection....

๐Ÿ“… 2022-04-13
CVSS 7.2 Dossier →
Page 3 of 15 (356 Total Records)