5469 matches found
CVE-2018-10649
There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...
CVE-2018-10648
There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
Design/Logic Flaw
There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
CVE-2018-10650
There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
Cross site scripting
There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...
CVE-2018-10649
There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...
CVE-2018-10650
There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
CVE-2018-10651
There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
CVE-2018-10652
There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3...
CVE-2018-10651
There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
EUVD-2018-2725
There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
CVE-2018-10650
There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
CVE-2018-10652
CVE-2018-10652 affects Citrix XenMobile Server 10.7 before RP3, causing Sensitive Data Leakage. The issue is a network-exploitable vulnerability with potential partial confidentiality impact per CVSS vector data. Citrix states that this and other issues have been addressed in newer builds, recomm...
CVE-2018-10648
Citrix XenMobile Server 10.7 and 10.8 are affected by CVE-2018-10648, an unauthenticated file upload vulnerability. The CTX234879 article confirms the issue and notes that vulnerability is addressed in Rolling Patch 2 for 10.8 and Rolling Patch 3 for 10.7. Mitigation guidance from Citrix also ind...
CVE-2018-10653
CVE-2018-10653 is an XML External Entity (XXE) processing vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Connected advisories confirm an XXE injection flaw could lead to unauthorized access to critical data, with Citrix releasing Rolling Patch 2 (for 10.8) and Rolli...
CVE-2018-10651
CVE-2018-10651 affects Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3, involving Open Redirect vulnerabilities. Citrix lists this CVE among several for XenMobile 10.7/10.8 and provides remediation via upgrades to RP2 (10.8) and RP3 (10.7). In clustering scenarios, mitigation includes...
CVE-2018-10650
CVE-2018-10650 is an Insufficient Path Validation vulnerability in Citrix XenMobile Server. Affected versions are 10.8 before Rolling Patch 2 and 10.7 before Rolling Patch 3. The Citrix article CTX234879 documents multiple XenMobile issues; for this CVE, remediation is to apply the appropriate ro...
CVE-2018-10654
There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
CVE-2018-10649
Citrix XenMobile Server 10.7 (before RP3) is affected by CVE-2018-10649, a Cross-Site Scripting (XSS) vulnerability that could allow an attacker to inject arbitrary web script or HTML. Mitigation per Citrix: upgrade XenMobile 10.7 to Rolling Patch 3 (RP3) and XenMobile 10.8 to Rolling Patch 2; th...