CVE-2018-10650

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10652

CVE-2018-10652 affects Citrix XenMobile Server 10.7 before RP3, causing Sensitive Data Leakage. The issue is a network-exploitable vulnerability with potential partial confidentiality impact per CVSS vector data. Citrix states that this and other issues have been addressed in newer builds, recomm...

CVE-2018-10648

Citrix XenMobile Server 10.7 and 10.8 are affected by CVE-2018-10648, an unauthenticated file upload vulnerability. The CTX234879 article confirms the issue and notes that vulnerability is addressed in Rolling Patch 2 for 10.8 and Rolling Patch 3 for 10.7. Mitigation guidance from Citrix also ind...

CVE-2018-10651

CVE-2018-10651 affects Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3, involving Open Redirect vulnerabilities. Citrix lists this CVE among several for XenMobile 10.7/10.8 and provides remediation via upgrades to RP2 (10.8) and RP3 (10.7). In clustering scenarios, mitigation includes...

EUVD-2018-2725

There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10654

CVE-2018-10654 affects Citrix XenMobile Server 10.8 (before RP2) and 10.7 (before RP3). The vulnerability is a Hazelcast Library Java Deserialization vulnerability in the clustering path. The Citrix advisory notes this issue is exposed only if XenMobile Clustering is enabled. Remediation stated i...

CVE-2018-10649

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...

CVE-2018-10650

CVE-2018-10650 is an Insufficient Path Validation vulnerability in Citrix XenMobile Server. Affected versions are 10.8 before Rolling Patch 2 and 10.7 before Rolling Patch 3. The Citrix article CTX234879 documents multiple XenMobile issues; for this CVE, remediation is to apply the appropriate ro...

CVE-2018-10654

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10649

Citrix XenMobile Server 10.7 (before RP3) is affected by CVE-2018-10649, a Cross-Site Scripting (XSS) vulnerability that could allow an attacker to inject arbitrary web script or HTML. Mitigation per Citrix: upgrade XenMobile 10.7 to Rolling Patch 3 (RP3) and XenMobile 10.8 to Rolling Patch 2; th...

CVE-2018-10648

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10653

There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10652

There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3...

Citrix XenMobile 10.x Multiple Security Updates

Description of Problem A number of security vulnerabilities have been identified in Citrix XenMobile Server. The vulnerabilities have been assigned the following CVE numbers. Affecting XenMobile Server 10.7 and 10.8: CVE-2018-10653 High: XML External Entity XXE Processing Vulnerability in Citrix...

HTML5 Error "Citrix Receiver cannot connect to the server" from external connection

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information. Internally users are able to launch application via HTML5 Client. But externally users are unable to...

CVE-2018-7218

The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2018-7218

The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2018-7218

CVE-2018-7218 affects Citrix NetScaler ADC and NetScaler Gateway AppFirewall, enabling remote arbitrary code execution via unspecified vectors. Affected versions include 10.5 up to 68.7, 11.0 up to 71.24, 11.1 up to 58.13, and 12.0 up to 57.24. The vulnerability has been addressed in newer builds...

CVE-2018-7218

The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors...