citrix Vulnerability Advisory Catalog

Total 356 security vulnerabilities recorded for citrix software and firmware.

← Back to All Vendors
Component: workspace_app

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the appl...

📅 2020-06-08
CVSS 7.8 Dossier →
Component: workspace_app

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges du...

📅 2020-06-08
CVSS 7.8 Dossier →
Component: sharefile_storagezones_controller

An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x...

📅 2020-05-07
CVSS 7.5 Dossier →
Component: sharefile_storagezones_controller

An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the mos...

📅 2020-05-07
CVSS 7.5 Dossier →
Component: sharefile_storagezones_controller

In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of M...

📅 2020-05-07
CVSS 7.5 Dossier →
CVE-2020-6175 MEDIUM
Component: citrix_sd-wan_center

Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation....

📅 2020-03-16
CVSS 5.9 Dossier →
Component: citrix_sd-wan_center

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS....

📅 2020-03-10
CVSS 6.1 Dossier →
Component: gateway_firmware

Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches stat...

📅 2020-03-06
CVSS 5.4 Dossier →
Component: gateway_firmware

Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security...

📅 2020-03-06
CVSS 7.5 Dossier →
Component: gateway_firmware

Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensit...

📅 2020-03-06
CVSS 5.3 Dossier →
Component: xenserver

Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vul...

📅 2020-01-23
CVSS 7.8 Dossier →
Component: receiver

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arb...

📅 2020-01-10
CVSS 7.8 Dossier →
CVE-2019-19781 CRITICAL
Component: application_delivery_controller_firmware

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal....

📅 2019-12-27
CVSS 9.8 Dossier →
CVE-2019-18225 CRITICAL
Component: application_delivery_controller_firmware

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before b...

📅 2019-10-21
CVSS 9.8 Dossier →
Component: application_delivery_management

Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control....

📅 2019-10-09
CVSS 8.8 Dossier →
Component: storefront_server

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks....

📅 2019-08-29
CVSS 7.5 Dossier →
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6)....

📅 2019-07-16
CVSS 8.8 Dossier →
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6)....

📅 2019-07-16
CVSS 8.8 Dossier →
CVE-2019-12990 CRITICAL
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal....

📅 2019-07-16
CVSS 9.8 Dossier →
CVE-2019-12989 CRITICAL
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection....

📅 2019-07-16
CVSS 9.8 Dossier →
CVE-2019-12988 CRITICAL
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6)....

📅 2019-07-16
CVSS 9.8 Dossier →
CVE-2019-12987 CRITICAL
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6)....

📅 2019-07-16
CVSS 9.8 Dossier →
CVE-2019-12986 CRITICAL
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6)....

📅 2019-07-16
CVSS 9.8 Dossier →
CVE-2019-12985 CRITICAL
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6)....

📅 2019-07-16
CVSS 9.8 Dossier →
Page 6 of 15 (356 Total Records)