citrix Vulnerability Advisory Catalog

Total 356 security vulnerabilities recorded for citrix software and firmware.

← Back to All Vendors
Component: virtual_apps_and_desktops

An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 h...

📅 2020-11-16
CVSS 8.8 Dossier →
Component: virtual_apps_and_desktops

An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX2858...

📅 2020-11-16
CVSS 8.8 Dossier →
Component: xenmobile_server

Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP...

📅 2020-09-18
CVSS 7.5 Dossier →
Component: application_delivery_controller_firmware

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187...

📅 2020-09-18
CVSS 8.8 Dossier →
Component: application_delivery_controller_firmware

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187...

📅 2020-09-18
CVSS 7.5 Dossier →
CVE-2020-8245 MEDIUM
Component: application_delivery_controller_firmware

Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC...

📅 2020-09-18
CVSS 6.1 Dossier →
CVE-2020-8200 MEDIUM
Component: storefront_server

Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domai...

📅 2020-09-18
CVSS 6.5 Dossier →
CVE-2020-8212 CRITICAL
Component: xenmobile_server

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and C...

📅 2020-08-17
CVSS 9.8 Dossier →
CVE-2020-8211 CRITICAL
Component: xenmobile_server

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and...

📅 2020-08-17
CVSS 9.8 Dossier →
Component: xenmobile_server

Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.1...

📅 2020-08-17
CVSS 7.5 Dossier →
Component: xenmobile_server

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP...

📅 2020-08-17
CVSS 7.5 Dossier →
CVE-2020-8208 MEDIUM
Component: xenmobile_server

Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before ...

📅 2020-08-17
CVSS 6.1 Dossier →
Component: workspace

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic upda...

📅 2020-07-24
CVSS 8.8 Dossier →
Component: gateway_plug-in_for_linux

Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root....

📅 2020-07-10
CVSS 7.8 Dossier →
CVE-2020-8198 MEDIUM
Component: application_delivery_controller_firmware

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SD...

📅 2020-07-10
CVSS 6.1 Dossier →
Component: application_delivery_controller_firmware

Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allo...

📅 2020-07-10
CVSS 8.8 Dossier →
CVE-2020-8196 MEDIUM
Component: application_delivery_controller_firmware

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWA...

📅 2020-07-10
CVSS 4.3 Dossier →
CVE-2020-8195 MEDIUM
Component: application_delivery_controller_firmware

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SD...

📅 2020-07-10
CVSS 6.5 Dossier →
CVE-2020-8194 MEDIUM
Component: application_delivery_controller_firmware

Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDW...

📅 2020-07-10
CVSS 6.5 Dossier →
CVE-2020-8193 MEDIUM
Component: application_delivery_controller_firmware

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWA...

📅 2020-07-10
CVSS 6.5 Dossier →
CVE-2020-8191 MEDIUM
Component: application_delivery_controller_firmware

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SD...

📅 2020-07-10
CVSS 6.1 Dossier →
Component: application_delivery_controller_firmware

Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privi...

📅 2020-07-10
CVSS 7.5 Dossier →
Component: application_delivery_controller_firmware

Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial o...

📅 2020-07-10
CVSS 7.5 Dossier →
Component: xenapp

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA err...

📅 2020-06-11
CVSS 5.3 Dossier →
Page 5 of 15 (356 Total Records)