CVE-2018-18517 - Cross-Site Scripting Vulnerability in Citrix NetScaler

Description of Problem A Cross-Site Scripting XSS vulnerability has been identified in Citrix NetScaler Gateway, formerly known as Citrix Access Gateway Enterprise Edition and Citrix ADC formerly known as NetScaler ADC, that if exploited by an attacker with access to the NetScaler administrative...

XenMobile/Endpoint Management: Cloud Gear Icon returning "this page isn't working HTTP ERROR 400"

Description: error "this page isn't working HTTP ERROR 400" may be displayed when trying to access the Cloud XenMobile / Endpoint Management Client instance when customers go to their own xxxx.xm.cloud and then click on the Could Gear Icon from the green tool bar at the top Doing so, will...

CVE-2018-17445: Improper Neutralization of Special Elements used in a Command

A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-17447: Insertion of Sensitive Information into Log File

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-17448: Undefined Security Weakness

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-17446: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

PT-2018-14032

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN version 10.1.0 NetScaler SD-WAN versions 9.3.x through 9.3.5 NetScaler SD-WAN versions 10.0.x through 10.0.3 Description A SQL Injection issue was discovered. Recommendations For Citrix SD-WAN version 10.1.0, update to a version...

CVE-2018-17444: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

PT-2018-14033

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN version 10.1.0 NetScaler SD-WAN versions 9.3.x through 9.3.5 NetScaler SD-WAN versions 10.0.x through 10.0.3 Description An issue was discovered that allows information exposure through log files. Recommendations For Citrix SD-WA...

PT-2018-14034

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN version 10.1.0 NetScaler SD-WAN versions 9.3.x through 9.3.5 NetScaler SD-WAN versions 10.0.x through 10.0.3 Description An issue with incorrect access control was found. Recommendations For Citrix SD-WAN version 10.1.0, update t...

PT-2018-14030

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN version 10.1.0 NetScaler SD-WAN versions 9.3.x through 9.3.5 NetScaler SD-WAN versions 10.0.x through 10.0.3 Description A Directory Traversal issue was discovered. Recommendations For Citrix SD-WAN version 10.1.0, at the moment,...

PT-2018-14031

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN version 10.1.0 NetScaler SD-WAN versions 9.3.x through 9.3.5 NetScaler SD-WAN versions 10.0.x through 10.0.3 Description A Command Injection issue was discovered. Recommendations For Citrix SD-WAN version 10.1.0, update to a...

Workspace App for Windows - Error "Cannot start app" intermittently

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Intermittently application launch fails with errors "Cannot start" or "Cannot start app" In Windows...

Citrix Receiver for Web: Error "Cannot complete your request"

Error messages: "Cannot complete your request" on browser when accessing Store for web...

Citrix Workspace App (CWA) or Receiver for Windows launch fails after Install or upgrade with Real-time Media Engine (RTME) installed

After installing or upgrading Citrix Workspace App or Receiver for Windows on an endpoint with the Real-time Media Engine RTME installed, resource launch fails for any application or desktop. This might also happen on endpoints that have Cisco's VXME installed. CWA or Receiver displays one of the...

Users on IOS devices can not log into XenApp after upgrading to Citrix Workspace app for iOS, authentication broken in 17.08

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users on Ipad IOS devices can no longer log into XenApp after upgrading Citrix Receiver to Citrix...

Black Box on screen on Mac Receiver version 12.9.0, 12.9.1 and Workspace app for Mac 18.08.

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Using XenApp VD Agent 7.15 CU2, we have big black boxes show up on screen during an active ICA sessi...

Citrix NetScaler Management and Analytics System Default Administrator Credentials

The remote Citrix NetScaler Management and Analytics System MAS uses a default password 'nsroot' for the administrator account 'nsroot'. With this information, an attacker can gain complete administrative access to the Citrix NetScaler appliance. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Citrix NetScaler Application Delivery Management (ADM)

The remote host appears to be running Citrix NetScaler Application Delivery Management ADM, formerly know as Management and Analytics System MAS. ADM provides centralized network management, analytics, automation, and orchestration to support applications deployed across hybrid cloud and...

Windows 10 v1903 and v1909 – Citrix Known Issues

Microsoft releases software updates for Windows 10 twice a year through the Semi-Annual Channel. Microsoft released its Semi-Annual Channel called 'May 2019 Update' v1903 in May 2019 and released its nextSemi-Annual Channel called 'November 2019 Update' v1909 in November 2019. This article is...