citrix Vulnerability Advisory Catalog

Total 356 security vulnerabilities recorded for citrix software and firmware.

← Back to All Vendors
CVE-2014-3798 MEDIUM
Component: xenserver

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Et...

📅 2019-07-11
CVSS 6.5 Dossier →
CVE-2019-12292 CRITICAL
Component: appdna

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control....

📅 2019-06-24
CVSS 9.8 Dossier →
CVE-2019-9548 CRITICAL
Component: application_delivery_management

Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control....

📅 2019-06-05
CVSS 10.0 Dossier →
CVE-2018-18571 CRITICAL
Component: xenmobile_server

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch...

📅 2019-06-05
CVSS 9.1 Dossier →
CVE-2019-10883 CRITICAL
Component: citrix_sd-wan_center

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection....

📅 2019-06-03
CVSS 9.8 Dossier →
CVE-2019-11634 CRITICAL
Component: receiver

Citrix Workspace App before 1904 for Windows has Incorrect Access Control....

📅 2019-05-22
CVSS 9.8 Dossier →
Component: netscaler_gateway_firmware

A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x before 12....

📅 2019-05-22
CVSS 7.5 Dossier →
CVE-2019-7218 MEDIUM
Component: sharefile

Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline v...

📅 2019-05-13
CVSS 5.9 Dossier →
Component: sharefile

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the ...

📅 2019-05-13
CVSS 7.5 Dossier →
Component: netscaler_sd-wan

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation....

📅 2019-05-08
CVSS 5.9 Dossier →
CVE-2019-6485 MEDIUM
Component: netscaler_gateway_firmware

Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5...

📅 2019-02-22
CVSS 5.9 Dossier →
Component: netscaler_gateway_firmware

Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS....

📅 2018-10-24
CVSS 4.8 Dossier →
Component: xenmobile_server

* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to ...

📅 2018-10-24
CVSS 4.8 Dossier →
Component: xenmobile_server

* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is suppl...

📅 2018-10-24
CVSS 7.8 Dossier →
CVE-2018-17448 CRITICAL
Component: netscaler_sd-wan

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4....

📅 2018-10-23
CVSS 9.8 Dossier →
Component: netscaler_sd-wan

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0....

📅 2018-10-23
CVSS 7.5 Dossier →
CVE-2018-17446 CRITICAL
Component: netscaler_sd-wan

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4....

📅 2018-10-23
CVSS 9.8 Dossier →
CVE-2018-17445 CRITICAL
Component: netscaler_sd-wan

A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4....

📅 2018-10-23
CVSS 9.8 Dossier →
Component: netscaler_sd-wan

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4....

📅 2018-10-23
CVSS 7.5 Dossier →
Component: sharefile_storagezones_controller

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message....

📅 2018-09-26
CVSS 4.3 Dossier →
Component: sharefile_storagezones_controller

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal....

📅 2018-09-26
CVSS 3.1 Dossier →
CVE-2018-14007 CRITICAL
Component: xenserver

Citrix XenServer 7.1 and newer allows Directory Traversal....

📅 2018-08-15
CVSS 9.8 Dossier →
Component: xenmobile_server

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3....

📅 2018-05-23
CVSS 8.1 Dossier →
CVE-2018-10653 CRITICAL
Component: xenmobile_server

There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3....

📅 2018-05-23
CVSS 9.8 Dossier →
Page 7 of 15 (356 Total Records)