CVE-2020-8208

Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting XSS...

CVE-2020-8212

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality...

CVE-2020-8209

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files...

Design/Logic Flaw

Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credentials of a service account...

Sql injection

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection...

Improper access control

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files...

Improper access control

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality...

Cross site scripting

Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting XSS...

CVE-2020-8212

CVE-2020-8212 affects Citrix Endpoint Management (XenMobile) on-premises XenMobile Server versions with Privilege Escalation due to improper access control that grants access to privileged functionality. Affected lines include: XenMobile Server 10.12 before RP2 (critical) and 10.11 before RP4, 10...

CVE-2020-8212

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality...

CVE-2020-8211

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection...

CVE-2020-8211

CVE-2020-8211 concerns Citrix Endpoint Management (XenMobile) with SQL Injection due to improper input validation. Affected on‑prem XenMobile Server versions include 10.12 before RP3, 10.11 before RP6, 10.10 before RP6, and before 10.9 RP5; critical flaws also affect 10.12 before RP2 and 10.11 be...

CVE-2020-8210

CVE-2020-8210 in Citrix XenMobile Server (EndPoint Management) stems from insufficient protection of secrets, causing service account credentials to be disclosed. Affected on-prem XenMobile/XenMobile Server versions include: 10.12 before RP3, 10.11 before RP6, 10.10 before RP6, and versions befor...

CVE-2020-8210

Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credentials of a service account...

CVE-2020-8209

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files...

CVE-2020-8209

Citrix XenMobile Server (XenMobile) is affected by a Local File Inclusion/Path Traversal vulnerability (CVE-2020-8209). Affected versions are Citrix XenMobile Server 10.12 before RP2, 10.11 before RP4, 10.10 before RP6, and earlier than 10.9 RP5. Root cause is improper access control that allows ...

CVE-2020-8208

CVE-2020-8208 affects Citrix XenMobile / Citrix Endpoint Management (CEM) XenMobile Server. The vulnerability arises from improper input validation that enables Cross-Site Scripting (XSS). Affected on‑prem XenMobile Server versions include 10.12 before RP2, 10.11 before RP4, 10.11 before RP6, and...

CVE-2020-8208

Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting XSS...

How to suppress "Add Account" prompt on Citrix Workspace App for Windows

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Suppress "Add Account" prompt after installing Citrix Workspace App for Windows...

Citrix Systems XenMobile Server Access Control Error Vulnerability

Citrix Systems XenMobile Server is a mobility management solution from Citrix Systems. The solution is able to manage mobile devices, develop mobile policies and compliance rules, and gain insight into the operation of mobile mobile networks. A security vulnerability exists in Citrix Systems...