CVE-2016-4945

Cross-site scripting XSS vulnerability in vpn/js/gatewayloginformview.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSCTMAC cookie...

CVE-2016-4810

CVE-2016-4810 affects Citrix Studio (bundled with Citrix XenApp/XenDesktop). The vulnerability allows an unauthenticated attacker to cause insecure Access Policy configuration on the XenDesktop Delivery Controller by using unspecified vectors. Affected versions include Citrix Studio before 7.6.10...

CVE-2016-4945

The CVE-2016-4945 entry describes a Cross-Site Scripting (XSS) vulnerability in Citrix NetScaler Gateway 11.0 prior to Build 66.11, exploitable via the NSC_TMAC cookie in vpn/js/gateway_login_form_view.js. Affected component: the gateway’s login form view script; root cause is improper handling o...

XenMobile POC Cheat Sheet

The purpose of this cheat sheet is to provide a detailed POC checklist to assist with the implementation of On-Premise POC implementations. This checklist includes a detailed diagram of your XenMobile POC implementation populated from the information included in the filled out checklist. Addition...

CVE-2016-4810 - Vulnerability in Citrix Studio Could Result in Insecure Access Policy Configuration

Description of Problem A vulnerability has been identified in Citrix Studio that could allow Access Policy rules to be set insecurely on the Citrix XenDesktop Delivery Controller. This vulnerability affects the following product versions: Citrix XenDesktop 7.x between versions 7.0 and 7.6...

Citrix NetScaler Gateway Login Form Hijacking Vulnerability (CTX213313)

Citrix NetScaler is prone to a login form hijacking vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix Netscaler 11.0 Build 64.35 Cross Site Scripting

PERSICON Security Advisory ======================================================================= Title: Login Form Hijacking vulnerability Product: Citrix Netscaler Vulnerable Version: 11.0 Build 64.35 Fixed Version: 11.0 Build 66.11 CVE-ID: CVE-2016-4945 Impact: medium found: 2015-04-07 by: Dr...

Citrix XenServer Multiple Vulnerabilities (CTX212736)

The version of Citrix XenServer running on the remote host is affected by multiple vulnerabilities in the bundled versions of OpenSSL and QEMU : - Multiple flaws exist in the bundled version of OpenSSL in the aesnicbchmacsha1cipher and aesnicbchmacsha256cipher functions that are triggered when th...

Citrix XenServer Multiple Security Updates (CTX212736)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM depending on configuration or an attacker on the management network to compromise the host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might b...

Process Shows "Starting Application", Freezes When Launching Applications from Receiver for iOS or From Browser on iOS Devices

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When trying to launch an application from and iOS device using the browser or the Citrix Receiver, t...

F5 Networks BIG-IP : Libpng vulnerability (K81903701)

Buffer overflow in the pngsetPLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a small...

Where to Locate and Download Citrix Product Software

This article provides instructions on where to locate and download product software. Requirements To acquire software for products purchased you must log in to your Citrix My Account with a username and password associated to the account that the product resides in. Background Most products requi...

How To perform Emergency Network Reset on Citrix Hypervisor/XenServer

To configure or restore the management interface from either XSCONSOLE or from CLI command-line interface...

Error: "Cannot add account" When Connecting Through iOS Receiver 6.1.4

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is received when connecting through iOS Receiver 6.1.4: "Cannot add account" The...

Citrix Receiver Error "Unable To Login" When Connecting To StoreFront With SSON Enabled

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When users attempt to run an applicationfrom Citrix Receiver they are presented with an error messag...

FAQ: Apple's Device Enrollment Program and Citrix Secure Hub Auto Install

Q: How to download and install Citrix Secure Hub automatically during DEP initial setup without the user searching the AppStore? A : The capability to install Secure Hub during DEP initial setup of a device is supported with XenMobile 10.3.x Server and later: All you need to do is to push the...

Getting Started with Citrix Secure Mail

The purpose of this getting started guide is to provide a reference document with key information about Citrix Citrix Secure Mail. Navigation: What is Secure Mail? Citrix Secure Mail Connection Modes List of Supported Mail Servers Citrix Secure Mail w/ IBM Notes Supported File Formats Push...

Citrix Endpoint Management (XenMobile) Server Support Bundle Overview

The following table has key information about Citrix Endpoint Management XenMobile Server Support Bundle. For additional information please review the following link. This includes: List of log files included in the bundle Log type Description of what is included in the log file Analytical value ...

Getting Started with Citrix Secure Web

The purpose of this getting started guide is to provide a reference document with key information about Citrix Citrix Secure Web. Navigation: What is Citrix Secure Web? Citrix Secure Web MicroVPN Connection Modes Supported Web Technologies Configure Citrix Secure Web and Proxy Servers MicroVPN...

Wiping a Managed device by XenMobile

In Citrix Endpoint Management, admins perform device and app security actions from the Manage Devices page. Device actions include revoke, lock, unlock, and wipe. App security actions include app lock and app wipe. For details, see...