Design/Logic Flaw

The Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow attackers to obtain credentials via the browser cach...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow...

CVE-2015-7997

Multiple cross-site scripting XSS vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow...

CVE-2015-7997

CVE-2015-7997 covers multiple XSS flaws in the Nitro API of Citrix NetScaler ADC and NetScaler Gateway, exploitable via remote vectors on SD appliances. Affected versions include NetScaler ADC and Gateway before 10.1 Build 133.9, 10.5 before 58.11, and 10.5.e before 56.1505.e on NetScaler SVMs. T...

CVE-2015-7996

The Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow attackers to obtain credentials via the browser cach...

CVE-2015-7998

The administration UI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allows attackers to obtain sensitive information v...

CVE-2015-7998

CVE-2015-7998 affects Citrix NetScaler ADC and NetScaler Gateway administration UI on NetScaler Service Delivery Appliance SVM. The vulnerability permits an attacker to obtain sensitive information via unspecified vectors in affected builds (ADC before 10.1 Build 133.9, 10.5 before Build 58.11, a...

CVE-2015-7996

The CVE-2015-7996 issue affects Citrix NetScaler products (ADC, Gateway, SVM) where the Nitro API can expose credentials via browser cache. Affected versions include NetScaler ADC and Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service ...

Citrix NetScaler Service Delivery Appliance Multiple Security Updates (CTX202482)

Citrix NetScaler is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:citrix:netscaler"; if...

Citrix NetScaler Service Delivery Appliance Multiple Security Updates (CTX202482)

Citrix NetScaler is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:citrix:netscaler"; if...

Multiple RDS Per Device CALs are issued to the same device when Streaming targets using PVS

License Count is incorrect withRDS Per Device CALswhen Streaming Citrix Virtual Apps VDA or Desktop VDA in Standard Mode. RDS Licensing Manager shows multiple RDS Per Device CALs consumed by same target VDA provisioned using Machine Creation Service MCS and PVS...

Duplicate App Icons on Receiver for Windows

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Affected users see multiple stores configured CCA4-UK, CCA4-UK1, CCA4-UK2 and so on. Receiver was...

Troubleshooting Citrix Receiver for Android

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Many connection issues might be caused by configuration issues on your IT department’s servers or...

docs.citrix.com XSS vulnerability

Vulnerable URL: http://docs.citrix.com/en-us/search.html?q=%22%3E%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 23.02.2016 Latest check for patch:| 23.02.2016 22:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Slow App Enumeration in StoreFront 3.0 with Receiver 4.3

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information App enumeration takes up to 4 mins. You can expedite the app enumeration by restarting the self service...

Checkmarx CxQL Sandbox bypass (CVE-2014-8778)

Checkmarx CxQL Sandbox bypass CVE-2014-8778 Vendor: Checkmarx - www.checkmarx.com Product: CxSuite Version affected: 7.1.5 and prior Credit: Huy-Ngoc DAU @ngocdh of Deloitte Conseil, France ================================ Introduction ================================ Checkmarx is a static source...

How to Use IIS to Acquire SSL Certificates for XenServer or Citrix Hypervisor

This article describes how to create a certificate in IIS and transfer it to a XenServer or Citrix Hypervisor server. This article applies to Citrix Hypervisor 8.1 or earlier...

SSL Error 61 - You have not chosen to trust Certificate Authority on Citrix Receiver for Windows

Citrix Gateway, formerly Citrix NetScaler Unified Gateway Citrix Workspace app is the new universal app for all workspace services, that will encompass all Citrix clients and app capabilities over time. The following error messagesare displayed for Receiver users accessing StoreFront or Web...

Error: "License server is not connected" in Citrix Director

On the Director site, if you scroll down to check the connectivity of the CitrixLicense server to each of thecontrollers, it shows up as "License server is not connected"...

How to Install Receiver Windows 4.2 Desktop Lock

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article explains howto install Receiver for Windows 4.2 desktop lock...