Deserialization of untrusted data

2018-05-2317:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

CPENameOperatorVersion
xenmobile_servereq10.8
xenmobile_servereq10.8 rp1
xenmobile_servereq10.7 rp2
xenmobile_servereq10.7 rp1
xenmobile_servereq10.7

Name	Operator	Version
xenmobile_server	eq	10.8
xenmobile_server	eq	10.8 rp1
xenmobile_server	eq	10.7 rp2
xenmobile_server	eq	10.7 rp1
xenmobile_server	eq	10.7

References

support.citrix.com/article/CTX234879