Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 3

Package name: xms10.16.0.10318.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10205.bin, xms10.16.0.10108.bin Date: August 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this a...

The vulnerability of the Unified Endpoint Management system of VMware Workspace ONE allows unauthorized access, as it involves insufficient protection for operational data. This makes it possible for attackers to disclose sensitive information that should be protected.

The vulnerability of the Unified Management System for VMware Workspace ONE endpoints relates to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is supposed to be secure...

Error: Connection Failed - Citrix Endpoint Management with Certificate Based Authentication

Warning Event ID = 39 or ID = 41 on Windows Server 2008 R2 SP1 and Windows Server 2008 SP2 before February 11,2025. "Connection failed" will be shown by clicking Test Connection in PKI Entities after February 11, 2025...

Citrix Endpoint Management: Gateway issues Guide

Introduction Configuring Citrix Gateway with XenMobile establishes the necessary authentication for remote device access to the internal network. This setup allows mobile applications to securely access corporate servers, facilitating seamless business operations from any location and ensuring th...

Citrix Endpoint Management: Intune issues Guide

Introduction Citrix Endpoint Management delivers secure micro-VPN connectivity, allowing seamless access behind corporate firewalls, while Intune enhances data protection for Office 365 mobile apps, preserving the end-user experience. Together, these technologies ensure robust security without...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 8

Package name: xms10.15.0.10808.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: July 2024 Languages...

Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 2

Package name: xms10.16.0.10205.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10108.bin Date: July 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to ensu...

Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 1

Package name: xms10.16.0.10108.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: None Date: June 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to ensure that you have...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 7

Package name: xms10.15.0.10731.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: June 2024 Languages supported: English US...

Citrix EndPoint Management - Reconfigure your Firebase Cloud Messaging (FCM) in CEM console

As permigration guidance, Google is going to deprecate the FCM legacy APIs for HTTP, which is currently used in our Citrix Endpoint Management CEM FCM implementation. The migration deadline is on June 21, 2024. Customers need to migrate the FCM from legacy FCM API to HTTP v1 API. With the release...

Ivanti EPM SQL注入漏洞

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. An SQL injection vulnerability exists in Ivanti EPM 2022 SU5 and prior versions, which can be exploited by an attacker to execute arbitrary code...

CVE-2024-22026

A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance...

The vulnerability of the UEM SafeMobile platform, a centralized management platform for mobile devices, is related to insufficient protection of operational data. This vulnerability allows attackers to disclose information about users of the application.

The vulnerability of the UEM SafeMobile platform, a centralized management platform for mobile devices, is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain information about application users by sending...

Microsoft announces the 2024 Microsoft Security Excellence Awards winners

At this years Microsoft Security Excellence Awards, we took a journey through the evolution of cybersecurity from the 1950s to today. While this event theme celebrated the significant technological advancements that have shaped each decade, the main focus was on the Microsoft Intelligent Security...

Security Bulletin: IBM Event Endpoint Management is vulnerable to a denial of service attack (CVE-2023-51074).

Summary IBM Event Endpoint Management is vulnerable to a denial of service due to json-path component, caused by a stack-based buffer overflow in the Criteria.parse method.It is a query language for JSON, similar to XPath for XML. It allows you to select and extract data from a JSON document...

FortiNet FortiClient EMS 7.2.2 / 7.0.10 SQL Injection / Remote Code Execution Exploit

A remote SQL injection vulnerability exists in FortiNet FortiClient EMS Endpoint Management Server versions 7.2.0 through 7.2.2 and 7.0.1 through 7.0.10. FortiClient EMS serves as an endpoint management solution tailored for enterprises, offering a centralized platform for overseeing enrolled...

FortiNet FortiClient EMS 7.2.2 / 7.0.10 SQL Injection / Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FortiNet FortiClient Endpoint Management Server FCTID SQLi to RCE', 'Description' = %q An SQLi injection vulnerability exists in FortiNet...

FortiNet FortiClient Endpoint Management Server FCTID SQLi to RCE

An SQLi injection vulnerability exists in FortiNet FortiClient EMS Endpoint Management Server. FortiClient EMS serves as an endpoint management solution tailored for enterprises, offering a centralized platform for overseeing enrolled endpoints. The SQLi is vulnerability is due to user controller...

Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints

This vulnerability allows authenticated users with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. These management operations should be restricted to users with the tenant admin role or superuser role. A...

Fortinet FortiClientEMS CSV Injection Vulnerability

Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. Fortinet FortiClientEMS suffers from...