CVE-2018-10649

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...

CVE-2018-10652

There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3...

CVE-2018-10650

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

Xxe

There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

Deserialization of untrusted data

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

Cross site scripting

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...

CVE-2018-10648

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

Unrestricted file upload

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10651

There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10654

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10649

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...

CVE-2018-10653

CVE-2018-10653 is an XML External Entity (XXE) processing vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Connected advisories confirm an XXE injection flaw could lead to unauthorized access to critical data, with Citrix releasing Rolling Patch 2 (for 10.8) and Rolli...

CVE-2018-10654

CVE-2018-10654 affects Citrix XenMobile Server 10.8 (before RP2) and 10.7 (before RP3). The vulnerability is a Hazelcast Library Java Deserialization vulnerability in the clustering path. The Citrix advisory notes this issue is exposed only if XenMobile Clustering is enabled. Remediation stated i...

CVE-2018-10649

Citrix XenMobile Server 10.7 (before RP3) is affected by CVE-2018-10649, a Cross-Site Scripting (XSS) vulnerability that could allow an attacker to inject arbitrary web script or HTML. Mitigation per Citrix: upgrade XenMobile 10.7 to Rolling Patch 3 (RP3) and XenMobile 10.8 to Rolling Patch 2; th...

CVE-2018-10652

CVE-2018-10652 affects Citrix XenMobile Server 10.7 before RP3, causing Sensitive Data Leakage. The issue is a network-exploitable vulnerability with potential partial confidentiality impact per CVSS vector data. Citrix states that this and other issues have been addressed in newer builds, recomm...

CVE-2018-10650

CVE-2018-10650 is an Insufficient Path Validation vulnerability in Citrix XenMobile Server. Affected versions are 10.8 before Rolling Patch 2 and 10.7 before Rolling Patch 3. The Citrix article CTX234879 documents multiple XenMobile issues; for this CVE, remediation is to apply the appropriate ro...

CVE-2018-10653

There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10651

There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10652

There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3...

CVE-2018-10650

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...