Citrix SD-WAN 信任管理问题漏洞

Citrix SD-WAN is a networking product from Citrix, Inc. It virtualizes and optimizes enterprise site-to-site networks. A security vulnerability exists in Citrix SD-WAN that stems from hard-coded credentials that allow administrators to access the shell via the SD-WAN CLI...

Citrix SD-WAN 跨站脚本漏洞

Citrix SD-WAN is a networking product from Citrix, Inc. A cross-site scripting vulnerability exists in Citrix SD-WAN versions prior to 11.4.3a, which allows virtualization and optimization of enterprise site-to-site networks. The vulnerability stems from the program's lack of data validation...

Citrix NetScaler SD-WAN Remote Code Execution (CVE-2017-6316)

A remote code execution vulnerability exists in Citrix NetScaler SD-WAN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2022-26151

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection...

CVE-2022-26151

CVE-2022-26151 affects Citrix XenMobile Server: versions 10.12–RP11, 10.13–RP7, and 10.14–RP4 are vulnerable to command injection. The issue is described as enabling command injection with risk of unauthorized OS access (admin-level on XenMobile CLI). Remediation per Citrix bulletin CTX370551 is ...

CVE-2021-44520

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges...

CVE-2021-44520

CVE-2021-44520 affects Citrix Endpoint Management (XenMobile Server). An authenticated XenMobile console user can perform command injection to obtain remote code execution with root privileges. Affected: XenMobile Server 10.12 RP9 and earlier; fixes are provided in patches for 10.13.0 (patch 7) a...

Citrix Gateway Plug-in for Windows Security Bulletin for CVE-2022-21827

A vulnerability has been discovered in Citrix Gateway Plug-in for Windows Citrix Secure Access for Windows. If exploited, this issue would allow an adversary, who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM. This issue has the...

PT-2022-17697 · Citrix · Citrix Xenmobile Server

Name of the Vulnerable Software and Affected Versions: Citrix XenMobile Server versions 10.12 through RP11 Citrix XenMobile Server versions 10.13 through RP7 Citrix XenMobile Server versions 10.14 through RP4 Description: The issue allows Command Injection. Recommendations: For versions 10.12...

Citrix Systems XenMobile Server 命令注入漏洞

Citrix XenMobile Server is a mobility management solution from Citrix. The solution is capable of managing mobile devices, developing mobile policies and compliance rules, and providing insight into the operation of mobile mobile networks. A command injection vulnerability exists in Citrix System...

Citrix Releases Security Updates for Multiple Products

Citrix has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Citrix security bulletins and apply the necessary...

Citrix SD-WAN Security Bulletin for CVE-2022-27505 and CVE-2022-27506

Vulnerabilities have been discovered in multiple Citrix SD-WAN products. These vulnerabilities, if exploited, could result in the following security issues: CVE-ID| Description| CWE| Affected Products| Pre-conditions ---|---|---|---|--- CVE-2022-27505| Reflected cross site scriptingXSS| CWE-79:...

Citrix Systems Citrix StoreFront Server 跨站脚本漏洞

Citrix Systems Citrix StoreFront Server Citrix StoreFront Server,Citrix StoreFront Server is a Citrix Systems Citrix Systems is an indispensable component of Xen virtualization as part of the authentication and delivery management process. Citrix StoreFront Server, Citrix StoreFront Server, Citri...

Citrix Endpoint Management (XenMobile Server) Security Bulletin for CVE-2021-44519, CVE-2021-44520, and CVE-2022-26151

Vulnerabilities have been discovered in Citrix Endpoint Management XenMobile Server, which, collectively, may allow a XenMobile console user with either anadmin role or a custom role that has ‘Create Support Bundles’ enabled,to gain root access to the underlying OS. CVE-ID| Description| CWE|...

Frequently Overlooked Settings to Improve Graphics Performance for XenApp, XenDesktop, Receiver Technologies

This article provides an overview of frequently overlooked or misconfigured settings that can be used to enhance graphics performance in XenDesktop, XenApp, and the Citrix Receiver. Background Throughout the life of XenApp and XenDesktop, the combination of many factors such as the architecture o...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 8

Package name: xms10.13.0.10817.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only zReplaces: xms10.13.0.10723.bin, xms10.13.0.10603.bin, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin. Date: April 2022 Languages...

Citrix StoreFront Security Bulletin for CVE-2022-27503

A reflected cross-site scripting XSS issue has been discovered in Citrix StoreFront when it is configured to use SAML authentication. If exploited, this issue would allow an attacker to execute client-side JavaScript in the same context as a legitimate user. This issue has the following identifie...

Citrix Releases Security Updates for Hypervisor

Citrix has released security updates to address a vulnerability in Hypervisor. An attacker could exploit this vulnerability to cause a denial-of-service condition. CISA encourages users and administrators to review Citrix Security Update CTX390511 and apply the necessary updates. This product is...

Citrix Hypervisor Security Update

A security issue has been identified that affects Citrix Hypervisor. This issue may allow privileged code in a guest VM to cause the host to crash or become unresponsive. The issue only affects systems with Intel CPUs where the malicious guest VM has had a physical PCI device assigned to it by th...

Citrix ShareFile Storage Zones Controller Remote Code Execution (CVE-2021-22941)

A remote code execution vulnerability exists in Citrix ShareFile Storage Zones Controller. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...