CVE-2018-10648

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

EUVD-2018-2725

There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10648

Citrix XenMobile Server 10.7 and 10.8 are affected by CVE-2018-10648, an unauthenticated file upload vulnerability. The CTX234879 article confirms the issue and notes that vulnerability is addressed in Rolling Patch 2 for 10.8 and Rolling Patch 3 for 10.7. Mitigation guidance from Citrix also ind...

CVE-2018-10651

CVE-2018-10651 affects Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3, involving Open Redirect vulnerabilities. Citrix lists this CVE among several for XenMobile 10.7/10.8 and provides remediation via upgrades to RP2 (10.8) and RP3 (10.7). In clustering scenarios, mitigation includes...

CVE-2018-10648: Unrestricted Upload of File with Dangerous Type

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10652: Exposure of Sensitive Information to an Unauthorized Actor

There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3...

CVE-2018-10653: Improper Restriction of XML External Entity Reference

There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10654: Deserialization of Untrusted Data

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10649: Improper Neutralization of Input During Web Page Generation

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...

PT-2018-10033

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.7 before RP3 and 10.8 before RP2 Description The issue concerns a Java Deserialization Vulnerability in the Hazelcast Library used by Citrix XenMobile Server. Recommendations For versions 10.7 before RP3,...

PT-2018-10029

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.7 before RP3 Citrix XenMobile Server versions 10.8 before RP2 Description The issue is related to an Insufficient Path Validation. Recommendations For Citrix XenMobile Server versions 10.7 before RP3, update...

PT-2018-10032

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.7 before RP3 and 10.8 before RP2 Description The issue is related to an XML External Entity XXE Processing Vulnerability. This type of vulnerability allows attackers to potentially access sensitive data or...

CVE-2018-10651: URL Redirection to Untrusted Site

There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10650: Untrusted Search Path

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

PT-2018-10030

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.7 before RP3 Citrix XenMobile Server versions 10.8 before RP2 Description The issue concerns Open Redirect Vulnerabilities. Recommendations For Citrix XenMobile Server versions 10.7 before RP3, update to RP3...

PT-2018-10027

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server version 10.7 before RP3 Description The issue is related to a Cross-Site Scripting vulnerability. Recommendations For Citrix XenMobile Server version 10.7 before RP3, update to a version that includes RP3 or later to...

PT-2018-10031

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server version 10.7 before RP3 Description The issue is related to Sensitive Data Leakage. Recommendations For Citrix XenMobile Server version 10.7 before RP3, update to a version that includes RP3 or later to resolve the issu...

PT-2018-10026

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.7 before RP3 Citrix XenMobile Server versions 10.8 before RP2 Description The issue concerns unauthenticated file upload vulnerabilities. Recommendations For Citrix XenMobile Server version 10.7 before RP3,...

Citrix XenMobile 10.x Multiple Security Updates

Description of Problem A number of security vulnerabilities have been identified in Citrix XenMobile Server. The vulnerabilities have been assigned the following CVE numbers. Affecting XenMobile Server 10.7 and 10.8: CVE-2018-10653 High: XML External Entity XXE Processing Vulnerability in Citrix...

HTML5 Error "Citrix Receiver cannot connect to the server" from external connection

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information. Internally users are able to launch application via HTML5 Client. But externally users are unable to...