citrix

393 tracked vulnerabilities.

CVE-2023-24489 CRITICAL KEVNUCLEI
Citrix ShareFile Storage Zones Controller - Unauthenticated Remote Compromise
Jul 10, 2023
CVSS 9.8
EPSS 0.95
CVE-2023-24488 MEDIUM NUCLEI
Citrix Gateway 12.1-12.1-65.35 and 13.0-13.0-90.11 - Cross-Site Scripting
Jul 10, 2023
CVSS 6.1
EPSS 0.81
CVE-2023-24487 MEDIUM
Citrix ADC & Gateway - Info Disclosure
Jul 10, 2023
CVSS 6.3
EPSS 0.01
CVE-2023-24486 MEDIUM
Citrix Workspace app for Linux - Privilege Escalation
Jul 10, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24485 HIGH
Citrix Workspace app - Privilege Escalation
Feb 16, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-24484 MEDIUM
Citrix Workspace < 2212 - Improper Access Control
Feb 16, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24483 HIGH
Citrix Virtual Apps and Desktops - Privilege Escalation
Feb 16, 2023
CVSS 7.8
EPSS 0.00
CVE-2022-27508 HIGH
Citrix Application Delivery Controller and Gateway - Unauthenticated Denial of Service
Jan 26, 2023
CVSS 7.5
EPSS 0.01
CVE-2022-27507 MEDIUM
Citrix Gateway 12.1-<12.1-64.17 and Application Delivery Controller 12.1-<12.1-55.278 - Authenticated Denial of Service
Jan 26, 2023
CVSS 6.5
EPSS 0.01
CVE-2022-27518 CRITICAL KEV
Citrix ADC and Gateway - Unauthenticated Remote Code Execution
Dec 13, 2022
CVSS 9.8
EPSS 0.07
CVE-2022-27516 MEDIUM
User Login <brute-force Protection - Auth Bypass
Nov 08, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-27513 HIGH
Citrix Gateway and Application Delivery Controller Firmware 12.1 - Remote Desktop Takeover via Phishing
Nov 08, 2022
CVSS 8.3
EPSS 0.00
CVE-2022-27510 CRITICAL
Citrix Gateway 12.1-<12.1-65.21 - Unauthenticated Improper Authentication
Nov 08, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-27509 MEDIUM
Citrix Gateway and Application Delivery Controller Firmware 12.1 - Unauthenticated Open Redirect
Jul 28, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-27512 MEDIUM
Citrix Application Delivery Management < 13.0-85.19 - Denial of Service via License Service Disruption
Jun 16, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-27511 HIGH
Citrix Application Delivery Management < 13.0-85.19 - Unauthenticated Administrator Password Reset via SSH
Jun 16, 2022
CVSS 8.1
EPSS 0.12
CVE-2022-21827 HIGH
Citrix Gateway Plug-in for Windows < 21.9.1.2 - Privilege Escalation to SYSTEM via Local File Manipulation
May 26, 2022
CVSS 7.1
EPSS 0.00
CVE-2022-27506 LOW
Citrix SD-WAN Firmware < 11.4.1 - Use of Hard-coded Credentials via SD-WAN CLI
Apr 13, 2022
CVSS 2.7
EPSS 0.01
CVE-2022-27505 MEDIUM
Citrix SD-WAN Firmware < 11.4.3a - Reflected Cross-Site Scripting
Apr 13, 2022
CVSS 6.1
EPSS 0.01
CVE-2022-27503 MEDIUM
Citrix StoreFront 3.12-3.12.8999 1912-1912.0.4999 - Cross-Site Scripting
Apr 13, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-26151 HIGH
Citrix XenMobile Server <10.14 - Command Injection
Apr 13, 2022
CVSS 7.2
EPSS 0.08
CVE-2022-26355 MEDIUM
Citrix Federated Authentication Service 7.17-10.6 - Unprotected Private Key Exposure via PowerShell TPM Configuration
Mar 10, 2022
CVSS 4.4
EPSS 0.00
CVE-2022-21825 HIGH
Citrix Workspace App for Linux 2012-2111 - Local Privilege Escalation via App Protection
Feb 09, 2022
CVSS 7.8
EPSS 0.00
CVE-2021-44519 HIGH
Citrix XenMobile Server through 10.12 RP9 - Authenticated Path Traversal and Remote Code Execution
Apr 19, 2022
CVSS 8.8
EPSS 0.03
CVE-2021-44520 HIGH
Citrix XenMobile Server through 10.12 RP9 - Authenticated Remote Code Execution via Command Injection
Apr 13, 2022
CVSS 8.8
EPSS 0.06