citrix Vulnerability Advisory Catalog

Total 356 security vulnerabilities recorded for citrix software and firmware.

← Back to All Vendors
Component: xenmobile_server

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root pr...

📅 2022-04-13
CVSS 8.8 Dossier →
Component: federated_authentication_service

Citrix Federated Authentication Service (FAS) 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's...

📅 2022-03-10
CVSS 4.4 Dossier →
Component: workspace

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker...

📅 2022-02-09
CVSS 7.8 Dossier →
Component: application_delivery_controller_firmware

An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with acce...

📅 2021-12-07
CVSS 7.5 Dossier →
Component: application_delivery_controller_firmware

A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or A...

📅 2021-12-07
CVSS 7.5 Dossier →
CVE-2021-22941 CRITICAL
Component: sharefile_storagezones_controller

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the s...

📅 2021-09-23
CVSS 9.8 Dossier →
Component: sharefile_storagezones_controller

An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption...

📅 2021-08-16
CVSS 7.5 Dossier →
Component: virtual_apps_and_desktops

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix...

📅 2021-08-05
CVSS 7.8 Dossier →
Component: application_delivery_controller_firmware

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker...

📅 2021-08-05
CVSS 8.1 Dossier →
Component: application_delivery_management

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citr...

📅 2021-08-05
CVSS 6.5 Dossier →
Component: application_delivery_controller_firmware

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citr...

📅 2021-08-05
CVSS 7.5 Dossier →
Component: cloud_connector

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Cit...

📅 2021-06-16
CVSS 7.5 Dossier →
CVE-2020-8300 MEDIUM
Component: gateway

Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper acc...

📅 2021-06-16
CVSS 6.5 Dossier →
CVE-2020-8299 MEDIUM
Component: gateway

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WAN...

📅 2021-06-16
CVSS 6.5 Dossier →
Component: workspace

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 21...

📅 2021-05-27
CVSS 7.8 Dossier →
CVE-2021-22891 CRITICAL
Component: sharefile_storagezones_controller

A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow una...

📅 2021-05-27
CVSS 9.8 Dossier →
CVE-2020-8275 MEDIUM
Component: secure_mail

Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related da...

📅 2021-01-06
CVSS 4.3 Dossier →
CVE-2020-8274 MEDIUM
Component: secure_mail

Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated acces...

📅 2021-01-06
CVSS 6.5 Dossier →
Component: virtual_apps_and_desktops

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2...

📅 2020-12-14
CVSS 8.8 Dossier →
Component: gateway_plug-in

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows a...

📅 2020-12-14
CVSS 7.5 Dossier →
CVE-2020-8257 CRITICAL
Component: gateway_plug-in

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to ...

📅 2020-12-14
CVSS 9.8 Dossier →
Component: sd-wan

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8....

📅 2020-11-16
CVSS 8.8 Dossier →
Component: sd-wan

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

📅 2020-11-16
CVSS 7.5 Dossier →
CVE-2020-8271 CRITICAL
Component: sd-wan

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

📅 2020-11-16
CVSS 9.8 Dossier →
Page 4 of 15 (356 Total Records)