Citrix Resolves Vulnerabilities in Virtual Apps and Workspace Apps

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Citrix Systems has addressed vulnerabilities in its Virtual Apps and Desktops, as well as Workspace Apps products, that could potentially enable attackers with local access to the target to elevat...

Citrix Workspace App 安全漏洞

Citrix Systems Citrix Workspace App formerly known as Receiver is an application used to provide secure access to applications, desktops, and data from Citrix Systems, Inc. A security vulnerability exists in the Citrix Workspace App that originates from allowing a standard user to perform...

PT-2023-19636

Name of the Vulnerable Software and Affected Versions Citrix Workspace app affected versions not specified Description Vulnerabilities have been identified that allow a standard Windows user to perform operations as SYSTEM on the computer running the affected software. Recommendations At the...

CVE-2023-24485: Improper Access Control

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app...

Citrix Workspace App 安全漏洞

Citrix Systems Citrix Workspace App formerly known as Receiver is an application used to provide secure access to applications, desktops, and data from Citrix Systems, USA. A security vulnerability exists in Citrix Workspace App that originates from a malicious user being able to write log files ...

CVE-2023-24485

Citrix Workspace App for Windows vulnerabilities CVE-2023-24484 and CVE-2023-24485 allow a local user to escalate to SYSTEM during installation/uninstallation of vulnerable versions. AFFECTED SOFTWARE: Citrix Workspace App for Windows (pre-2212; 2203 LTSR before CU2; 1912 LTSR before CU7 Hotfix 2...

CVE-2023-24485 Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app...

SUSE CVE-2015-1307

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

SUSE CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

SUSE CVE-2015-4925

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

SUSE CVE-2016-2312

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

SUSE CVE-2022-29244

npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag ie. --workspaces, --workspace=. Anyone who has run npm pack or npm publish inside a workspace, as of v7.9.0 and v7.13.0 respectively, may be affected and have published...

Vulnerabilities fixed in Citrix products

Several vulnerabilities have been fixed in Citrix products. The vulnerability with reference CVE-2023-24483 is located in Citrix Virtual Apps and Desktops Windows VDAs. An authenticated malicious party could potentially exploit this vulnerability to obtain elevated privileges within a Windows VDA...

Citrix Workspace app for Windows Security Bulletin for CVE-2023-24484 & CVE-2023-24485

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app. These vulnerabilities have the following identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions ---|---|---|---...

Citrix Workspace app for Linux Security Bulletin for CVE-2023-24486

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched. CVE ID|...

SA40002 - [Pulse Secure] June 11th 2015 OpenSSL Security Advisory

Last Modified Date Aug 24, 2026 12:34:42 AM...

SA40662 - Pulse Workspace data exposure

Last Modified Date Aug 24, 2026 2:08:27 AM...

Citrix Releases Security Updates for Workspace Apps, Virtual Apps and Desktops

Citrix has released security updates to address high-severity vulnerabilities CVE-2023-24486, CVE-2023-24484, CVE-2023-24485, and CVE-2023-24483 in Citrix Workspace Apps, Virtual Apps and Desktops. A local user could exploit these vulnerabilities to take control of an affected system. CISA...

CVE-2022-47412

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition...

CVE-2022-47412 ONLYOFFICE Workspace Search Stored XSS

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition...