Citrix Xen vulnerabilities

• citrix hypervisor, xenserver +1 more Potential Denial of Service affecting XenServer and Citrix Hypervisor CVE-2024-5661 6.0 MediumJune 13, 2024
• citrix xenmobile server In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal... CVE-2021-44519 8.8 HighApril 19, 2022
• citrix xenmobile server Citrix XenMobile Server 10.12 through RP11, 10.13 through RP6, and 10.14 through RP4 allows... CVE-2022-26151 7.2 HighApril 12, 2022
• citrix xenmobile server In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection... CVE-2021-44520 8.8 HighApril 12, 2022
• citrix virtual apps and desktops, xenapp, xendesktop +2 more A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited,... CVE-2021-22928 7.8 HighAugust 5, 2021
• citrix virtual apps and desktops, xenapp, xendesktop +2 more An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary... CVE-2020-8283 8.8 HighDecember 14, 2020
• citrix virtual apps and desktops, xenapp, xendesktop +2 more An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD... CVE-2020-8269 8.8 HighNovember 16, 2020
• citrix xenmobile server Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10... CVE-2020-8253 7.5 HighSeptember 18, 2020
• citrix xenmobile server Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10... CVE-2020-8212 9.8 CriticalAugust 17, 2020
• citrix xenmobile server Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10... CVE-2020-8211 9.8 CriticalAugust 17, 2020
• citrix xenmobile server Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile... CVE-2020-8210 7.5 HighAugust 17, 2020
• citrix xenmobile server Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10... CVE-2020-8209 Public exploit EPSS 43.9% 7.5 HighAugust 17, 2020
• citrix xenmobile server Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10... CVE-2020-8208 6.1 MediumAugust 17, 2020
• citrix xenapp ** VERSION NOT SUPPORTED WHEN ASSIGNED ** Citrix XenApp 6.5, when 2FA is enabled, allows a remote... CVE-2020-13998 5.3 MediumJune 11, 2020
• citrix xenserver Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5... CVE-2012-4606 7.8 HighJanuary 23, 2020
• citrix receiver, xenapp online +1 more Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2... CVE-2012-4603 7.8 HighJanuary 10, 2020
• citrix xenserver The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause... CVE-2014-3798 6.5 MediumJuly 11, 2019
• citrix xenmobile server An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0... CVE-2018-18571 9.1 CriticalJune 5, 2019
• xen, citrix xenserver, debian linux +2 more An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial... CVE-2018-19965 Fix available 5.6 MediumDecember 8, 2018
• xen, citrix xenserver, debian linux +2 more An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS... CVE-2018-19962 Fix available 7.8 HighDecember 8, 2018
• xen, citrix xenserver, debian linux +2 more An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS... CVE-2018-19961 Fix available 7.8 HighDecember 8, 2018
• citrix xenmobile server ** DISPUTED *** Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged... CVE-2018-18014 Disputed 7.8 HighOctober 24, 2018
• citrix xenmobile server ** DISPUTED *** Xen Mobile through 10.8.0 includes a service listening on port 5001 within its... CVE-2018-18013 Disputed 7.8 HighOctober 24, 2018
• citrix xenserver Citrix XenServer 7.1 and newer allows Directory Traversal. CVE-2018-14007 EPSS 47.3% 9.8 CriticalAugust 15, 2018
• intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 more System software utilizing Lazy FP state restore technique on systems using Intel Core-based... CVE-2018-3665 Fix available 5.6 MediumJune 13, 2018
• citrix xenmobile server There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8... CVE-2018-10654 8.1 HighMay 23, 2018
• citrix xenmobile server There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8... CVE-2018-10653 Public exploit 9.8 CriticalMay 23, 2018
• citrix xenmobile server There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3. CVE-2018-10652 7.5 HighMay 23, 2018
• citrix xenmobile server There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7... CVE-2018-10651 6.1 MediumMay 23, 2018
• citrix xenmobile server There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2... CVE-2018-10650 7.8 HighMay 23, 2018
• citrix xenmobile server There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3. CVE-2018-10649 6.1 MediumMay 23, 2018
• citrix xenmobile server There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2... CVE-2018-10648 9.8 CriticalMay 23, 2018
• debian linux, freebsd, xen +8 more +10 more A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software... CVE-2018-8897 Public exploitFix available EPSS 18.5% 7.8 HighMay 8, 2018
• xen, citrix xenserver, debian linux +2 more arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors... CVE-2017-12137 Fix available 8.8 HighAugust 24, 2017
• xen, citrix xenserver, debian linux +2 more Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS... CVE-2017-12136 Fix available 7.8 HighAugust 24, 2017
• xen, citrix xenserver, debian linux +2 more Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive... CVE-2017-12135 Fix available 8.8 HighAugust 24, 2017
• xen, citrix xenserver +1 more The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS... CVE-2017-12134 Fix available 8.8 HighAugust 24, 2017
• citrix netscaler sd-wan, netscaler sd-wan enterprise, cloudbridge virtual wan, and xenmobile server +1 more Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute... CVE-2017-6316 In KEVPublic exploit EPSS 73.0% 9.8 CriticalJuly 20, 2017
• citrix xenmobile server XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3... CVE-2017-9231 7.5 HighJune 16, 2017
• citrix xenmobile server ** DISPUTED ** Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to... CVE-2016-6877 Disputed 5.3 MediumMay 5, 2017
• qemu, citrix xenserver, debian linux +8 more +10 more Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is... CVE-2017-2620 Fix available 5.5 MediumFebruary 22, 2017
• qemu, citrix xenserver, debian linux +8 more +10 more Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an... CVE-2017-2615 Fix available 5.5 MediumFebruary 1, 2017
• citrix xenserver An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An... CVE-2017-5573 4.9 MediumJanuary 30, 2017
• citrix xenserver An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An... CVE-2017-5572 6.5 MediumJanuary 30, 2017
• qemu, citrix xenserver, debian linux +7 more +9 more A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display... CVE-2016-9603 Fix available 5.5 MediumDecember 31, 2016
• xen, citrix xenserver +1 more VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions ... CVE-2016-10025 Fix available 5.5 MediumDecember 21, 2016
• xen, citrix xenserver +1 more Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service... CVE-2016-10024 Fix available 6.0 MediumDecember 21, 2016
• citrix xenserver The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model... CVE-2016-9637 Fix available 7.5 HighDecember 7, 2016
• xen, citrix xenserver +1 more The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV... CVE-2016-9385 Fix available 6.0 MediumDecember 7, 2016
• xen, citrix xenserver +1 more The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing... CVE-2016-9386 Fix available 7.8 HighNovember 24, 2016
• Show olderLoading…