CVE-2018-18014

2018-10-2421:29:00

CWE-287

web.nvd.nist.gov

citrix

xen mobile

cve-2018-18014

vulnerability

authentication

local users

system commands

root access

internal firewall

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

CPENameOperatorVersion
citrix:xenmobile_servercitrix xenmobile serverle10.8.0

CPE	Name	Operator	Version
citrix:xenmobile_server	citrix xenmobile server	le	10.8.0

References

advisories.dxw.com/advisories/xen-mobile-backing-service-allows-unauthenticated-local-users-to-execute-system-commands-as-root/