CVE-2020-8209

Citrix XenMobile Server (XenMobile) is affected by a Local File Inclusion/Path Traversal vulnerability (CVE-2020-8209). Affected versions are Citrix XenMobile Server 10.12 before RP2, 10.11 before RP4, 10.10 before RP6, and earlier than 10.9 RP5. Root cause is improper access control that allows ...

CVE-2020-8209

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files...

CVE-2020-8208

Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting XSS...

CVE-2020-8208

CVE-2020-8208 affects Citrix XenMobile / Citrix Endpoint Management (CEM) XenMobile Server. The vulnerability arises from improper input validation that enables Cross-Site Scripting (XSS). Affected on‑prem XenMobile Server versions include 10.12 before RP2, 10.11 before RP4, 10.11 before RP6, and...

Citrix Systems XenMobile Server Cross-Site Scripting Vulnerability

Citrix Systems XenMobile Server is a mobility management solution from Citrix Systems. The solution is able to manage mobile devices, develop mobile policies and compliance rules, and gain insight into the operation of mobile mobile networks. A cross-site scripting vulnerability exists in Citrix...

Citrix Systems XenMobile Server Access Control Error Vulnerability

Citrix Systems XenMobile Server is a mobility management solution from Citrix Systems. The solution is able to manage mobile devices, develop mobile policies and compliance rules, and gain insight into the operation of mobile mobile networks. A security vulnerability exists in Citrix Systems...

Citrix Systems XenMobile Server Command Injection Vulnerability

Citrix Systems XenMobile Server is a mobility management solution from Citrix Systems. The solution is able to manage mobile devices, develop mobile policies and compliance rules, and gain insight into the operation of mobile mobile networks. A command injection vulnerability exists in Citrix...

Citrix Systems XenMobile Server Path Traversal Vulnerability

Citrix Systems XenMobile Server is a mobility management solution from Citrix Systems. The solution is able to manage mobile devices, develop mobile policies and compliance rules, and gain insight into the operation of mobile mobile networks. A path traversal vulnerability exists in Citrix System...

Citrix Systems XenMobile Server Information Disclosure Vulnerability

Citrix Systems XenMobile Server is a mobility management solution from Citrix Systems. The solution is able to manage mobile devices, develop mobile policies and compliance rules, and gain insight into the operation of mobile mobile networks. An information disclosure vulnerability exists in Citr...

Citrix Warns of Critical Flaws in XenMobile Server

Citrix is urging users to immediately patch a pair of critical flaws in its flagship mobile device management software. If exploited, the flaws could allow remote, unauthorized attackers to access domain account credentials – ultimately opening the door to a treasure trove of corporate data,...

Critical Flaws Affect Citrix Endpoint Management (XenMobile Servers)

Citrix today released patches for multiple new security vulnerabilities affecting its Citrix Endpoint Management CEM, also known as XenMobile, a product made for enterprises to help companies manage and secure their employees' mobile devices remotely. Citrix Endpoint Management offers businesses...

Critical Flaws Affect Citrix Endpoint Management (XenMobile Servers)

Citrix today released patches for multiple new security vulnerabilities affecting its Citrix Endpoint Management CEM , also known as XenMobile, a product made for enterprises to help companies manage and secure their employees' mobile devices remotely. Citrix Endpoint Management offers businesses...

Citrix XenMobile XML External Entity Injection (CVE-2018-10653)

An XML External Entity Injection vulnerability exists in Citrix XenMobile Server. Successful exploitation of this vulnerability could result in unauthorized access to critical data in Citrix XenMobile Server...

XenMobile - Moving from LDAP to LDAPS

I am planning to turn on LDAPS on our XenMobile servers in the DMZ. We are being sure to open port 636 from our firewall to allow proper LDAPS traffic to flow. I understand there is one additional step to be performed prior to making the switch. I believe I need to export the root certificate fro...

XenMobile LDAP Settings: Bad Request

When attempting to configure an LDAP server in XenMobile, "Bad Request" is shown in the web console. LDAP connection is attempted on port 389 plain text. Ping to the LDAP server is successful. Connection is successful. XenMobile Debug Logs show the following: 2018-05-18T13:09:08.526+0000 | | INFO...

Citrix XenMobile Server 10.8 - XML External Entity Injection Exploit

Exploit for xml platform in category web applications Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection Google Dork: inurl:zdm logon Exploit Author: Jonas Lejon Vendor Homepage: https://www.citrix.com Software Link: Version: XenMobile Server 10.8 before RP2 and 10.7 befo...

Citrix XenMobile Server 10.8 XML Injection

Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection Google Dork: inurl:zdm logon Date: 2019-11-28 Exploit Author: Jonas Lejon Vendor Homepage: https://www.citrix.com Software Link: Version: XenMobile Server 10.8 before RP2 and 10.7 before RP3 Tested on: XenMobile CVE :...

Citrix XenMobile Server 10.8 - XML External Entity Injection

Citrix XenMobile Server 10.8 - XML External Entity Injection Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection Google Dork: inurl:zdm logon Date: 2019-11-28 Exploit Author: Jonas Lejon Vendor Homepage: https://www.citrix.com Software Link: Version: XenMobile Server 10.8...

Citrix XenMobile Server 10.8 - XML External Entity Injection

Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection Google Dork: inurl:zdm logon Date: 2019-11-28 Exploit Author: Jonas Lejon Vendor Homepage: https://www.citrix.com Software Link: Version: XenMobile Server 10.8 before RP2 and 10.7 before RP3 Tested on: XenMobile CVE :...

XenMobile Server experiences a communications error with Apple Deployment Programs (formerly DEP)

XenMobile Server administrators may notice that newly added Apple devices, which are registered viaApple Deployment Programs formerly DEP, do not appear on XenMobile Server. Previously enrolled devices are not affected. Apple DEP connectivity test initiated from the XenMobile server may also fail...