Directory traversal

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

Improper access control

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

Information disclosure

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

Sql injection

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

Command injection

A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-17444

Citrix SD-WAN/NetScaler SD-WAN directory traversal issue (CVE-2018-17444) affects Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4, allowing an unauthenticated attacker with access to the management interface to reach sensitive parts of the host. The root caus...

CVE-2018-17448

CVE-2018-17448 is an Incorrect Access Controls vulnerability in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. The Citrix bulletin describes multiple vulnerabilities affecting the management interface of Citrix NetScaler SD-WAN appliances, allowing an unaut...

CVE-2018-17445

CVE-2018-17445 is a Command Injection vulnerability in Citrix SD-WAN/NetScaler SD-WAN. The Citrix advisory CTX236992 states multiple vulnerabilities in the management interface could allow an unauthenticated attacker with access to the management interface to compromise the host. Affected version...

CVE-2018-17447

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-17446

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-17444

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-17445

A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-17446

Citrix SD-WAN and NetScaler SD-WAN SQL Injection (CVE-2018-17446) affects Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x prior to 9.3.6 and 10.0.x prior to 10.0.4. The issue is a SQL injection vulnerability in the management interface, enabling an unauthenticated attacker with access to the mana...

CVE-2018-17447

CVE-2018-17447 is an information exposure vulnerability in Citrix SD-WAN and NetScaler SD-WAN where log files leak sensitive data. Affected versions include Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. The Citrix security bulletin CTX236992 notes several ...

CVE-2018-17448

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-18517 - Cross-Site Scripting Vulnerability in Citrix NetScaler

Description of Problem A Cross-Site Scripting XSS vulnerability has been identified in Citrix NetScaler Gateway, formerly known as Citrix Access Gateway Enterprise Edition and Citrix ADC formerly known as NetScaler ADC, that if exploited by an attacker with access to the NetScaler administrative...

XenMobile/Endpoint Management: Cloud Gear Icon returning "this page isn't working HTTP ERROR 400"

Description: error "this page isn't working HTTP ERROR 400" may be displayed when trying to access the Cloud XenMobile / Endpoint Management Client instance when customers go to their own xxxx.xm.cloud and then click on the Could Gear Icon from the green tool bar at the top Doing so, will...

Workspace App for Windows - Error "Cannot start app" intermittently

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Intermittently application launch fails with errors "Cannot start" or "Cannot start app" In Windows...

Citrix Receiver for Web: Error "Cannot complete your request"

Error messages: "Cannot complete your request" on browser when accessing Store for web...

Citrix Workspace App (CWA) or Receiver for Windows launch fails after Install or upgrade with Real-time Media Engine (RTME) installed

After installing or upgrading Citrix Workspace App or Receiver for Windows on an endpoint with the Real-time Media Engine RTME installed, resource launch fails for any application or desktop. This might also happen on endpoints that have Cisco's VXME installed. CWA or Receiver displays one of the...