citrix Vulnerability Advisory Catalog

Total 356 security vulnerabilities recorded for citrix software and firmware.

← Back to All Vendors
Component: xenmobile_server

There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3....

📅 2018-05-23
CVSS 7.5 Dossier →
Component: xenmobile_server

There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3....

📅 2018-05-23
CVSS 6.1 Dossier →
Component: xenmobile_server

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3....

📅 2018-05-23
CVSS 7.8 Dossier →
Component: xenmobile_server

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3....

📅 2018-05-23
CVSS 6.1 Dossier →
CVE-2018-10648 CRITICAL
Component: xenmobile_server

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3....

📅 2018-05-23
CVSS 9.8 Dossier →
CVE-2018-7218 CRITICAL
Component: application_delivery_controller_firmware

The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.2...

📅 2018-05-17
CVSS 9.8 Dossier →
CVE-2018-6811 MEDIUM
Component: netscaler_application_delivery_controller_firmware

Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12...

📅 2018-03-06
CVSS 6.1 Dossier →
Component: netscaler_gateway_firmware

Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attacker...

📅 2018-03-06
CVSS 7.5 Dossier →
CVE-2018-6809 CRITICAL
Component: netscaler_application_delivery_controller_firmware

NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system...

📅 2018-03-06
CVSS 9.8 Dossier →
Component: netscaler_application_delivery_controller_firmware

NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the t...

📅 2018-03-06
CVSS 7.5 Dossier →
Component: netscaler_application_delivery_controller

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build ...

📅 2018-03-01
CVSS 7.5 Dossier →
Component: netscaler

Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. T...

📅 2018-02-01
CVSS 8.8 Dossier →
Component: application_delivery_controller_firmware

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19...

📅 2017-12-13
CVSS 5.9 Dossier →
Component: application_delivery_controller_firmware

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19...

📅 2017-12-13
CVSS 5.9 Dossier →
Component: application_delivery_controller_firmware

A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 b...

📅 2017-09-26
CVSS 7.2 Dossier →
CVE-2015-3642 MEDIUM
Component: netscaler_firmware

The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x be...

📅 2017-08-02
CVSS 5.9 Dossier →
CVE-2017-6316 CRITICAL
Component: netscaler_sd-wan

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On...

📅 2017-07-20
CVSS 9.8 Dossier →
Component: xenmobile_server

XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via u...

📅 2017-06-16
CVSS 7.5 Dossier →
CVE-2016-6877 MEDIUM
Component: xenmobile_server

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host heade...

📅 2017-05-05
CVSS 5.3 Dossier →
Component: netscaler_gateway_firmware

A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52....

📅 2017-04-13
CVSS 8.8 Dossier →
Component: xenserver

The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administ...

📅 2017-02-17
CVSS 7.5 Dossier →
CVE-2017-5933 MEDIUM
Component: netscaler_application_delivery_controller_firmware

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM...

📅 2017-02-08
CVSS 5.9 Dossier →
CVE-2017-5573 MEDIUM
Component: xenserver

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other a...

📅 2017-01-30
CVSS 4.9 Dossier →
CVE-2017-5572 MEDIUM
Component: xenserver

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host databa...

📅 2017-01-30
CVSS 6.5 Dossier →
Page 8 of 15 (356 Total Records)