The vulnerability of the microprogramming software of the Citrix NetScaler Application Delivery Controller and the Citrix NetScaler Gateway access control system lies in the lack of access control mechanisms. This allows a malicious individual to gain access to the system with elevated privileges.

The vulnerability of the microprogramming software of the Citrix NetScaler Application Delivery Controller and the Citrix NetScaler Gateway access control system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to the system...

Citrix XenServer Multiple Vulnerabilities (CTX232096)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108886; scriptversion"1.5";...

Citrix XenServer Multiple Vulnerabilities (CTX232655)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108887; scriptversion"1.6";...

How to change the customized icon for published apps in Citrix Cloud using Remote PowerShell SDK

In On-prem environment the icon of a published application can be replaced through the Application properties GUI. However in Citrix Cloud customized icon replacement is not possible from the GUI. We can use Remote PowerShell SDK to get it changed...

Citrix XenServer 7.2 Multiple Security Updates

Description of Problem A number of security issues have been identified within Citrix XenServer 7.2 which could, if exploited, allow a malicious man-in-the-middle MiTM attacker on the management network to decrypt management traffic. Collectively, this has been rated as a medium severity...

Citrix XenServer Multiple Security Updates

Description of Problem A number of vulnerabilities have been identified within Citrix XenServer that could, if exploited, allow a malicious administrator of a guest VM to crash the host and, for some XenServer versions, allow a remote attacker to compromise the host. The following vulnerabilities...

Citrix Releases Security Updates

Citrix has released security updates to address vulnerabilities in its XenServer. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review the Citrix Security Bulletin CTX232655 and apply the...

Receiver install error "DVCRenderingAdapter.dll failed to register"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. While installing Receiver, users may encounter an error like: "DVCRenderingAdapter.dll failed to...

Users unable to launch the published desktops and applications - XML errors on StoreFront servers

Event ID 0, Task Category 12346: No available resource found for user [email protected] when accessing desktop group "Remote Desktop - ABCXYZ". This message was reported from the Citrix XML Service at address http://xxx.yyy.zzz/scripts/wpnbr.dll NFuseProtocol.TRequestAddress. Event ID 28, Task Category...

The vulnerability of the Citrix NetScaler delivery mechanism, related to insufficient validation of incoming requests, allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the Citrix NetScaler web application delivery mechanism lies in insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor, operating remotely with webapp privileges, to gain access to the nsroot account and execute arbitrary commands...

Error: "Propagation failed on one or more servers" when you attempt to propagate changes to StoreFront Server Group

Consider the following scenario. You have two or more StoreFront servers in the Server Group. When you attempt to propagatechanges to the StoreFront Server Group, it might fail with the error: "Propagation failed on one or more servers " as shown in the screenshot below: Additionally, following...

User Profile Management: Default Exclusion List not working. Error: "HDX policy DefaultSyncExclusionListDir disabled. Using an empty list"

If you enable "Enable Default Exclusion List - directories " policy from Citrix Studio, it might not work as expected. Following entry isrecorded in User Profile Management UPM logs: 2018-03-16;19:09:25.611;INFORMATION;;;;1756;ReadPolicy: HDX policy DefaultSyncExclusionListDir disabled. Using an...

Google Cloud print no longer available with Citrix Workspace app for Chrome OS

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Google Cloud print not working with Citrix Workspace app for Chrome OS This applies toCitrix Workspace a...

Citrix NetScaler ADC and NetScaler Gateway Arbitrary File Download Vulnerability

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly known as Citrix Access Gateway Enterprise Edition are both products of Citrix Systems. NetScaler ADC is a service and application delivery solution Application Delivery Controller; NetScaler Gateway is a secure...

Citrix NetScaler ADC and NetScaler Gateway Elevation of Privilege Vulnerability

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly known as Citrix Access Gateway Enterprise Edition are both products of Citrix Systems. NetScaler ADC is a service and application delivery solution Application Delivery Controller; NetScaler Gateway is a secure...

CVE-2018-6811

Multiple cross-site scripting XSS vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface...

CVE-2018-6811

Multiple cross-site scripting XSS vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface...

CVE-2018-6811

Multiple cross-site scripting XSS vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface...

CVE-2018-6811

CVE-2018-6811 consists of multiple Cross‑Site Scripting (XSS) vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway. The weaknesses allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface. Affected versions include NetScaler ADC and NetScaler Gatew...