5468 matches found
Citrix SD-WAN Command Injection (CVE-2019-12991)
A command injection vulnerability exists in Citrix SD-WAN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Citrix SD-WAN SQL Injection (CVE-2019-12989)
An SQL injection vulnerability exists in Citrix SD-WAN. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...
Gateway page stuck after authentication on Chrome browser v100
- Citrix Gateway integration with Storefront -Custom Themes based on RFWEBUI, but may appear with others too - Observed at CVPN and Regular Storefront Integrations. -Chrome Version updated to 100.0.4896.60 Official Build 64-bit or later triggers the issue. - Page is stuck spinning circle...
How to Create Application Firewall Policy for Chunk Requests to Bypass Application Firewall on Citrix ADC 8.1-9.3
This article describes how to create application firewall policy for chunk requests to bypass Application Firewall module. Background In NetScaler software release 8.1 to 9.3 the Application Firewall module does not support chunked request. As a workaround you can create an Application Firewall...
Citrix PVS Configuration Wizard fails after upgrading from 1912 CU5 to 2109 or higher
After updating the PVS version to PVS 1912 Any CU to PVS 2109 or higher Including 2203 LTSR the Citrix CVAD Wizard will fail to create any new devices. A CDF trace would show the following errors in the logs: 3453,0,2022/03/29 11:31:53:91395,8044,8652,1,PVSDllMAPIAO,,0,,1,Error,"SqlException...
Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 5
Package name: xms10.14.0.10521.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin Date: March 2022 Languages supported: English US Important notes about this update As a best...
Citrix Gateway HTTP Detection
Binary data citrixgatewayhttpdetect.nbin...
Gateway Callback and / or XML Communication fails after upgrade to Storefront 2203
The issue occurs when customers upgrade from Storefront 1912 to 2203 and had TLS1.0 disabled prior to upgrading Does not occur on a clean install, or with TLS 1.0 enabled. In this scenario customers will encounter a TLS communication issue between Storefront and ADC / Storefront and Citrix Delive...
Citrix - Gateway as a service - Error Codes For Session Launch Failure
Multiple Error codes during session launch failures...
Citrix virtual app - You have exceeded your profile storage space
Some users report getting message "You have exceeded your profile storage space"...
Citrix Gateway and StoreFront Error After Upgrade "There are no apps or desktops available to you at this time."
Customer had upgraded ADC firmware to 13.0.71.44 from 13.0.58.30 during a change window. Post-upgrade when they authenticate and login to their Citrix Gateway URL and land on StoreFront, they get a blank screen with no applications and desktops being displayed. The issue is seen on all browsers...
Citrix-ADM using localhost IP 127.0.0.1 to send syslog traffic to Splunk server
Citrix-ADM 13.0 76.29 is noted to be using localhost IP to send Syslog traffic instead of ADM IP to external Syslog server. As a result, Citrix ADM is not able to send the Syslog traffic to Splunk server successfully as seen below. A tcpdump on Citrix ADM also shows traffic is generated and sent...
ADC 13.0 - Error : Please log on. The server met an error. Please try again or contact your administrator
Error after login to Citrix Gateway: "Please log on The server met an error. Please try again or contact your administrator" Logging in works fine internally through StoreFront server, but fails when trying to log on through Citrix Gateway. The session policy was noted to be looking for a referer...
Citrix SD-WAN and NetScaler Command Injection Vulnerability
Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance...
How to add secure attribute for citrix_ns_id cookie to Citrix Application Firewall Profile
Adding secure attribute for citrixnsid cookie...
Citrix Multiple Products Remote Code Execution Vulnerability
A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability al...
Citrix SD-WAN and NetScaler SQL Injection Vulnerability
Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection...
Power actions fail for all target devices from PVS console
When attempting to power manage Target Devices via Citrix PVS, the power actions for Restart and Shutdown are failing., i.e. right click Target Device Restart or Shutdown, the process starts but fails with status "Failed". No errors are reported in the event logs...
Citrix ShareFile Improper Access Control Vulnerability
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller...