CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-8069MEDIUM | Limited remote code execution with privilege of a NetworkService Account accessLimited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server | CVSS5.1v4.0 | EPSS14.7% | PoCs1 | SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-8068MEDIUM | Privilege escalation to NetworkService Account accessPrivilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain CWE-269Nov 12, 2024 | CVSS5.1v4.0 | EPSS1.4% | PoCs0 | SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |