Citrix Systems StoreFront Server XML External Entity Injection Vulnerability

Citrix Systems StoreFront Server is an enterprise application store from Citrix Systems USA. The product focuses on providing users with an interface to remotely access XenDesktop and XenApp virtual desktops and applications. An XML external entity injection vulnerability exists in Citrix Systems...

CVE-2019-13608 - XML External Entity (XXE) Processing Vulnerability in Citrix StoreFront Server

Description of Problem An XML External Entity XXE processing vulnerability has been identified in Citrix StoreFront Server that could allow an unauthenticated attacker to retrieve potentially sensitive information from the server. This vulnerability has been assigned the following CVE number: •...

PT-2019-6105 · Citrix · Citrix Storefront Server

Name of the Vulnerable Software and Affected Versions: Citrix StoreFront Server versions prior to 1903 Citrix StoreFront Server 7.15 LTSR versions prior to CU4 3.12.4000 Citrix StoreFront Server 7.6 LTSR versions prior to CU8 3.0.8000 Description: The issue is related to incorrect restriction of...

StoreFront 1906.1.0.27 upgrade and installation issues

The following issues have been discovered with StoreFront1906.1.0.27concerning upgrading and uninstalling: 1. If you attempt to upgrade to StoreFront 1906 from StoreFront 3.7, or from a version of StoreFront that was upgraded from StoreFront 3.7, the upgrade fails. WSP-4386 2. Uninstallation of...

How to Log On to StoreFront When Authentication is Disabled on NetScaler Gateway VIP

This article provides information on how to log on to StoreFront when authentication is disabled on NetScaler Gateway VIP...

Error: "Unable to launch your application." When Launching Published Applications or Desktops Through Citrix Gateway

Citrix Gateway, formerly Citrix NetScaler Unified Gateway The following error is displayed when launching published applications or desktops through CitrixGateway: "Unable to launch your application." If you directly connect to the StoreFront URL, then you are able to launch the published...

Authentication login Issues with IOS device - error "CAMAuthManErrorCodeProtocol"

Customer receives an error "CAMAuthManErrorCodeProtocol" when he tried to login to his storefront server from the outside of hsi company...

How to Enable SSL on Cloud Connectors to Secure XML Traffic

This article describes how to enable SSL on Cloud Connectors to secure XML traffic from the StoreFront server and how to configure your StoreFront site to secure the XML traffic...

XenApp/ XenDesktop- Limit application to one instance per user is not working

You have limited a published application to one instance per user. However when a user clicks on an application icon in StoreFront multiple times, it still launches multiple instances of the application...

Error: "An error occurred during refresh" when opening StoreFront console

An error occurred during refresh. System.InvalidOperationException: Sequence contains more than one element...

How to redirect client to download Receiver client from Citrix.com

To redirect clients to download and/or upgrade from the Citrix.com site instead of from the StoreFront server...

"Cannot complete request" when logging on via NetScaler using dual factor authentication and SSON to StoreFront Server 3.14

After configuring a remote portal with StoreFront servers load balanced with NetScaler, a user authenticates and they get the error "Cannot complete your request". From the event Viewer logs of the StoreFront SF server: "An error occurred while using SSL configuration for endpoint 0.0.0.443. The...

Additional Lifecycle Information for StoreFront

This article is a supplement to the Non-Sale ProductsLifecycle information StoreFront is an integral component of Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop but can be used with several versions of Citrix Virtual Apps and Desktops and XenApp and XenDesktop. For customers that...

Receiver for Chrome - Applications do not launch in seamless mode. They launch in Windowed mode.

Receiver for Chrome - Applications do not launch in seamless mode. They launch in Windowed mode. Using Receiver chrome 2.3, NetScaler 10.1, StoreFront 3.5 and XenApp 6.5. Receiver for Chrome is unable to open applications in seamless window. Seamless window integration is working when using WI 5....

ICA File Can't Be Launched by CDViewer for Specific User

Click the XenDesktop icon on StoreFront, IE11 doesn't invoke CDViewer to get through to XenDesktop. 2. Click the XenDesktop icon on StoreFront, Chrome 46.0 downloads the ICA file, clicking the downloaded ICA file doesn't invoke CDViewer to get through to XenDesktop. Usercan logon to same VDA...

Attempting to setup UPN authentication instead of SAM. When we hit the Store Front, we get "cannot complete your request".

Attempting to setup UPN authentication instead of SAM. When we hit the StoreFront, we get "cannot complete your request". From inside the network, when accessing the storefront portal directly, able to log in with UPN. Issue appears to be the way the NetScaler is handing the authentication token ...

The management console is unavailable because a root certificate is missing

After upgrading StoreFront from 3.9 to 3.12 CU1 - StoreFront console fails with 'The management console is unavailable because a root certificate is missing'...

CVE-2018-2505: Improper Neutralization of Input During Web Page Generation

SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability in storefronts that are based on the product. Fixed in versions SAP Hybris Commerce, versions 6.2, 6.3, 6.4, 6.5, 6.6, 6.7...

Upgrade to 7.15 LTSR CU updates on Storefront server fails with error 0x000003E5

Upgrading from Xenapp 7.15 LTSR CU1 to CU2 is failing for Storefront servers with this message: "Error Id: XDMI:95464884 Exception: Citrix.MetaInstaller.Exceptions.MetaInstallerException 'CitrixStoreFront-x64.exe' component failed to install with error 0x000003E5. at...

StoreFront Loopback Feature analysis when configuring Base URL for load balance

In previous versions of StoreFront such as 2.6 or older, Citrix recommended that you manually modify the hosts file on each StoreFront server to map the fully qualified domain name FQDN of the load balancer to the loopback address or the IP address of the specific StoreFront server. This ensures...