Skip to contentCitrix vulnerabilities
Products
Show 34 moreShow less
Newest
- citrix provisioningA non-admin user can cause short-term disruption in Target VM availability in Citrix ProvisioningCVE-2024-61504.8 Medium
- citrix workspace app for windows, workspace +1 moreLocal Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCVE-2024-62868.5 High
- citrix virtual apps and desktops, windows virtual delivery agent +1 moreLocal Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCVE-2024-61518.5 High
- citrix netscaler agent, netscaler console, netscaler sdx +3 more +5 moreDenial of ServiceCVE-2024-62367.1 High
- citrix netscaler console, netscaler console +1 moreSensitive information disclosureCVE-2024-6235EPSS 21.2%9.4 Critical
- citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 moreOpen redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websitesCVE-2024-54925.1 Medium
- citrix netscaler adc, netscaler gateway, netscaler adc +2 more +4 moreDenial of ServiceCVE-2024-54917.2 High
- citrix hypervisor, xenserver +1 morePotential Denial of Service affecting XenServer and Citrix HypervisorCVE-2024-56616.0 Medium
- ietf dhcp, cisco anyconnect vpn client, secure client +7 more +9 moreDHCP routing options can manipulate interface-based VPN trafficCVE-2024-3661Public exploitFix available7.6 High
- citrix sd-wan standard/premium editions, sd wan premium edition, sd wan standard edition +12 more +14 moreServer-Side Request Forgery (SSRF)CVE-2024-20496.5 Medium
- citrix workspaceImproper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier...CVE-2024-22416.3 Medium
- citrix session recording session recording, cloud software group citrix session recording, citrix virtual apps and desktops +2 moreCross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross...CVE-2023-6184EPSS 46.9%5.0 Medium
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 moreDenial of ServiceCVE-2023-6549In KEVEPSS 57.6%8.2 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more[PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to ...CVE-2023-6548In KEV5.5 Medium
- citrix workspaceOffline mode is always enabled, even if permission disallows it, in
Devolutions Server data...CVE-2023-65886.5 Medium
- citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 moreDenial of serviceCVE-2023-49678.2 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 moreUnauthenticated sensitive information disclosureCVE-2023-4966In KEVPublic exploitEPSS 100.0%9.4 Critical
- citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 morePrivilege Escalation to root administrator (nsroot)CVE-2023-34678.0 High
- citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 moreReflected Cross-Site Scripting (XSS)CVE-2023-34668.3 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 moreUnauthenticated remote code executionCVE-2023-3519In KEVPublic exploitEPSS 99.7%9.8 Critical
- citrix secure access client for ubuntu, secure access client +1 moreA vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if...CVE-2023-244929.6 Critical
- citrix secure access client for windows, secure access client +1 moreA vulnerability has been discovered in the Citrix Secure Access client for Windows
which, if...CVE-2023-244917.8 High
- citrix sharefile storage zones controller, content collaboration +1 moreA vulnerability has been discovered in the customer-managed ShareFile storage zones controller...CVE-2023-24489In KEVPublic exploitEPSS 97.3%9.8 Critical
- citrix linux virtual delivery agent, virtual delivery agents for linux for cvad and citrix daas security, virtual delivery agents for windows for cvad and citrix daas security +1 more +3 moreUsers with only access to launch VDA applications can launch an unauthorized desktopCVE-2023-244906.3 Medium
- citrix adc and citrix gateway, gateway, application delivery controller +2 moreArbitrary file readCVE-2023-244876.3 Medium
- citrix adc and citrix gateway, gateway, application delivery controller +2 moreCross site scriptingCVE-2023-24488Public exploitEPSS 81.2%6.1 Medium
- citrix workspace app for linux, workspace +1 moreLocal user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applicationsCVE-2023-244865.5 Medium
- citrix workspace app for windows, workspace +1 morePrivilege Escalation on the system running a vulnerable version of Citrix Workspace app for WindowsCVE-2023-244857.8 High
- citrix workspace app for windows, workspace +1 moreA malicious user can cause log files to be written to a directory that they do not have permission to write to.CVE-2023-244845.5 Medium
- citrix virtual apps and desktopsPrivilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDACVE-2023-244837.8 High
- citrix workspaceONLYOFFICE Workspace Search Stored XSSCVE-2022-474125.4 Medium
- citirx citrix application delivery controller (citrix adc) and citrix gateway, citrix application delivery controller, gateway +2 moreUnauthenticated denial of serviceCVE-2022-275087.5 High
- citirx citrix application delivery controller (citrix adc) and citrix gateway, citrix application delivery controller, gateway +2 moreAuthenticated denial of serviceCVE-2022-275076.5 Medium
- citrix gateway, application delivery controller firmware +1 moreIn certain Citrix products, information disclosure can be achieved by an authenticated VPN user...CVE-2019-181776.5 Medium
- citrix application delivery controller (adc) and gateway, application delivery controller firmware, gateway, citrix adc +1 more +3 moreUnauthenticated remote arbitrary code executionCVE-2022-27518In KEVPublic exploit9.8 Critical
- citrix application delivery controller firmware, gateway, citrix adc, gateway +2 moreUser login brute force protection functionality bypassCVE-2022-275165.3 Medium
- citrix gateway, application delivery controller firmware, gateway, citrix adc +2 moreUnauthorized access to Gateway user capabilitiesCVE-2022-275109.8 Critical
- citrix application delivery controller firmware, gateway, citrix adc, gateway +2 moreRemote desktop takeover via phishingCVE-2022-275138.3 High
- citirx citrix application delivery management (citrix adc) and citrix gateway, citrix application delivery controller firmware, gateway +2 moreUnauthenticated redirection to a malicious websiteCVE-2022-275096.1 Medium
- citrix application delivery management, application delivery management (citrix adm) +1 moreTemporary disruption of the ADM license serviceCVE-2022-275125.3 Medium
- citrix application delivery management, application delivery management (citrix adm) +1 moreCorruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator passwordCVE-2022-27511EPSS 12.7%8.1 High
- citrix gateway plug-inAn improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows ...CVE-2022-218277.1 High
- citrix xenmobile serverIn Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal...CVE-2021-445198.8 High
- citirx citrix sd-wan, citrix sd-wan 1000 firmware, sd-wan 1100 firmware +10 more +12 moreReflected cross site scripting (XSS)CVE-2022-275056.1 Medium
- citirx citrix sd-wan, citrix sd-wan 1000 firmware, sd-wan 1100 firmware +12 more +14 moreHard-coded credentials allow administrators to access the shell via the SD-WAN CLICVE-2022-275062.7 Low
- citrix storefront, storefront server +1 moreCross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and...CVE-2022-275036.1 Medium
- citrix xenmobile serverCitrix XenMobile Server 10.12 through RP11, 10.13 through RP6, and 10.14 through RP4 allows...CVE-2022-261517.2 High
- citrix xenmobile serverIn Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection...CVE-2021-445208.8 High
- citrix federated authentication service (fas), federated authentication service +1 moreCitrix Federated Authentication Service (FAS)CVE-2022-263554.4 Medium
- citrix workspace app for linux, workspace +1 moreAn Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111...CVE-2022-218257.8 High
- Show moreLoading…