CVE-2022-26151

HIGH

Citrix XenMobile Server <10.14 - Command Injection

Title source: llm
STIX 2.1

Description

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://support.citrix.com/search
Vendor Advisory x_refsource_misc
https://support.citrix.com/article/CTX370551

Scores

CVSS v3 7.2
EPSS 0.0582
EPSS Percentile 90.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-77
Status published
Products (2)
citrix/xenmobile_server 10.13.0 (6 CPE variants)
citrix/xenmobile_server 10.14.0 (5 CPE variants)
Published Apr 13, 2022
Tracked Since Feb 18, 2026