CVE-2014-1899

Citrix NetScaler Gateway (formerly Citrix Access Gateway Enterprise Edition) is affected by a cross-site scripting (XSS) vulnerability (CVE-2014-1899) in 9.x before 9.3.66.5 and 10.x before 10.1.123.9. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2881

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors...

CVE-2014-2882

Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation...

Design/Logic Flaw

Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation...

Design/Logic Flaw

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors...

CVE-2014-2882

CVE-2014-2882 affects Citrix NetScaler management GUI; the SSL context assigns an empty trust manager, causing certificate validation to be bypassed and any certificate to be accepted. Affected versions are NetScaler ADC/Gateway prior to 9.3-66.5 and 10.x prior to 10.1-122.17. Affected via the ma...

CVE-2014-2881

The CVE-2014-2881 issue affects Citrix NetScaler devices (ADC and NetScaler Gateway) where the Diffie-Hellman key exchange in the management GUI Java applet uses a weak RNG. The root cause is use of java.util.Random to generate secret values, with known predictors and small seed sizes (32/48 bits...

CVE-2014-2882

Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation...

CVE-2014-2881

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors...

CVE-2014-2690

Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log...

Command injection

Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log...

CVE-2014-2690

Citrix VDI-in-a-Box is affected (versions 5.3.x prior to 5.3.6 and 5.4.x prior to 5.4.3). Local users can obtain administrator credentials by reading the log. The available sources state the root cause as a log-read vulnerability but do not provide deeper technical details, exploit steps, or a pa...

CVE-2014-2690

Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log...

CVE-2014-0160 - Citrix Security Advisory for the Heartbleed vulnerability

Overview A vulnerability has been recently disclosed in OpenSSL that could result in remote attackers being able to obtain sensitive data from the process address space of a vulnerable OpenSSL server or client. The issue has been assigned the following CVE identifier and is also known as the...

Citrix NetScaler Application Delivery Controller Multiple Vulnerabilities

The remote Citrix NetScaler version is affected by multiple vulnerabilities : - A denial of service vulnerability in the VM Virtual Machine Daemon. Please note that this particular vulnerability does not apply to Citrix NetScaler 10.1. CVE-2013-6938 - A denial of service vulnerability in the...

Citrix NetScaler应用交付控制器本地信息泄露漏洞(CVE-2013-6940)

BUGTRAQ ID: 66020 CVECAN ID: CVE-2013-6940 Citrix NetScaler是一款网络流量管理产品。 Citrix NetScaler SDX 10.0及9.3版本的应用支付控制器在实现上存在安全漏洞，攻击者可利用此漏洞将用户凭证记录到磁盘，导致信息泄露。 0 Citrix NetScaler SDX 9.x Citrix NetScaler SDX 10.x 厂商补丁： Citrix ------ Citrix已经为此发布了一个安全公告（CTX139049）以及相应补丁: CTX139049：Citrix NetScaler Applicati...

Citrix NetScaler应用交付控制器跨站LDAP注入漏洞(CVE-2013-6943)

BUGTRAQ ID: 66043 CVECAN ID: CVE-2013-6943 Citrix NetScaler是一款网络流量管理产品。 Citrix NetScaler SDX 10.0及9.3版本的应用支付控制器在实现上存在安全漏洞，攻击者可利用此漏洞造成SSH和Web管理用户名内的LDAP注入。 0 Citrix NetScaler SDX 9.x Citrix NetScaler SDX 10.x 厂商补丁： Citrix ------ Citrix已经为此发布了一个安全公告（CTX139049）以及相应补丁: CTX139049：Citrix NetScaler...

CVE-2013-6939

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."...

CVE-2013-6942

Cross-site request forgery CSRF vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6944

Cross-site scripting XSS vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vector...