{"id":"CVE-2014-4700","aliases":["EUVD-2014-4619","GHSA-7g6q-fw46-cpmr"],"status":"published","title":"Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and...","description":"Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.","severity":{"version":"2.0","score":4.9,"vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00606,"percentile":0.49246,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2014-07-11T14:00:00Z","modified":"2026-06-17T00:10:28Z","products":[{"vendor":"citrix","product":"xendesktop"}],"references":[{"url":"http://www.securityfocus.com/bid/68530","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030566","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/59889","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94460","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://support.citrix.com/article/CTX139591","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4700"},{"url":"https://github.com/advisories/GHSA-7g6q-fw46-cpmr"}],"sources":{"cve":[{"id":"CVE-2014-4700","description":"Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.","status":"published","published":"2014-07-11T14:00:00Z","modified":"2024-08-06T11:27:36.082Z","updated_at":"2026-11-02T14:33:45.604635Z"}],"euvd":[{"id":"EUVD-2014-4619","description":"Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.","status":"published","published":"2014-07-11T14:00:00Z","modified":"2024-08-06T11:27:36Z","updated_at":"2026-11-03T01:57:05.7284Z"}],"ghsa":[{"id":"GHSA-7g6q-fw46-cpmr","title":"Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and...","description":"Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.","status":"published","published":"2022-05-14T01:47:40Z","modified":"2023-02-02T05:04:20Z","updated_at":"2026-11-02T14:51:50.619018Z"}],"nvd":[{"id":"CVE-2014-4700","description":"Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.","status":"published","published":"2014-07-11T14:55:04.65Z","modified":"2026-06-17T00:10:28.823Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:54.827864Z"}]}}