Citrix Vulnerabilities and Affected Products
Vulnerabilities associated with Citrix Workspace app for HTML5.
Products
Clear product- NetScaler ADC and NetScaler Gateway15 vulnerabilities
- SD-WAN and NetScaler7 vulnerabilities
- Citrix Workspace app for Windows5 vulnerabilities
- virtual_apps_and_desktops5 vulnerabilities
- Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance4 vulnerabilities
- Citrix Gateway, Citrix ADC4 vulnerabilities
- NetScaler ADC4 vulnerabilities
- NetScaler Gateway4 vulnerabilities
- ShareFile4 vulnerabilities
- application_delivery_controller_firmware2 vulnerabilities
- Citrix ADC and Citrix Gateway2 vulnerabilities
- Citrix Application Delivery Management (Citrix ADM)2 vulnerabilities
- Citrix Secure Access Client for Windows2 vulnerabilities
- Citrix Workspace app for HTML52 vulnerabilities
- NetScaler2 vulnerabilities
- NetScaler ADC and Gateway2 vulnerabilities
- netscaler_application_delivery_controller2 vulnerabilities
- netscaler_gateway2 vulnerabilities
- Secure Access Client for Mac2 vulnerabilities
- Secure Access Client for Windows2 vulnerabilities
- secure_access_client2 vulnerabilities
- Session Recording2 vulnerabilities
- workspace_app2 vulnerabilities
- Application Delivery Controller (ADC) and Gateway1 vulnerability
- Citrix Endpoint Analysis Client for Windows1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-6149MEDIUM | Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5 CWE-601Jul 10, 2024 | CVSS4.8v4.0 | EPSS0.225% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-6148MEDIUM | Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 CWE-276Jul 10, 2024 | CVSS5.3v4.0 | EPSS0.402% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |