Command injection

2022-04-1300:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.

CPENameOperatorVersion
xenmobile_servereq10.13.0 rollingpatch3
xenmobile_servereq10.13.0 rollingpatch4
xenmobile_servereq10.13.0 rollingpatch5
xenmobile_servereq10.13.0 rollingpatch6
xenmobile_servereq10.13.0
xenmobile_servereq10.14.0 rollingpatch1
xenmobile_servereq10.14.0 rollingpatch2
xenmobile_servereq10.14.0 rollingpatch3
xenmobile_servereq10.14.0

Name	Operator	Version
xenmobile_server	eq	10.13.0 rollingpatch3
xenmobile_server	eq	10.13.0 rollingpatch4
xenmobile_server	eq	10.13.0 rollingpatch5
xenmobile_server	eq	10.13.0 rollingpatch6
xenmobile_server	eq	10.13.0
xenmobile_server	eq	10.14.0 rollingpatch1
xenmobile_server	eq	10.14.0 rollingpatch2
xenmobile_server	eq	10.14.0 rollingpatch3
xenmobile_server	eq	10.14.0