CVE-2013-2933

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2938

Technical details of CVE-2013-2938 are not publicly available in the provided documents; monitor for updates.

CVE-2013-2601

The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection...

CVE-2013-2938

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2936

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2937

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2013-2935

Technical details are not publicly available in the provided documents. Monitor for updates from Citrix/NVD/Red Hat entries for affected versions, impact, and remediation.

CVE-2013-2940

Technical details (affected product/component/version, root cause, exploit information) for CVE-2013-2940 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2013-2933

Technical details about CVE-2013-2933 are not provided in the supplied documents; no affected versions, root cause, or remediation are disclosed. Monitor for updates from cited sources.

CVE-2013-2935

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2601

The CVE-2013-2601 issue affects Citrix XenClient XT NDVM in versions prior to 2.1.3 and 3.x prior to 3.1.4. A UIVM-controlled network connection can be abused by a remote attacker to execute arbitrary commands. The description in the sources confirms the vulnerability class and impact but does no...

CVE-2013-2934

Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 is affected. The issue is that web services access is not properly restricted, with unspecified impact and attack vectors. Root cause details are not provided beyond this restriction gap. No exploitation or specific ...

CVE-2013-2939

Technical details for CVE-2013-2939 are not publicly available in the provided documents. Monitor for updates.

Citrix Presentation Server 4.5 ActiveSync Feature Code Execution

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by a code execution vulnerability in the ActiveSync Feature. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary code on the remote host subject to the privileges...

Citrix Presentation Server 4.5 Multiple Vulnerabilities

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple vulnerabilities : - The application can cause clients to use weaker encryption settings than configured by the administrator, which could allow attackers to bypass intended...

Citrix Presentation Server 4.5 Code Execution

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple code execution vulnerabilities. By sending a specially crafted packet to the IMA server process, a remote, unauthenticated attacker could execute arbitrary code subject to the...

Citrix AGEE Logon Portal Unspecified XSS

The remote Citrix AGEE web management interface is susceptible to cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid67200; scriptversion"1.13";...

Citrix Web Interface 5.x < 5.4 Unspecified XSS

The remote host contains a version of Citrix Web Interface 5.x earlier than 5.4.0. Such versions are reportedly affected by an as-yet unspecified cross-site scripting vulnerability. An attacker could exploit this issue to steal cookie-based authentication and launch other attacks. C Tenable Netwo...

Citrix NetScaler Web Management Interface Default Administrator Credentials

The remote Citrix NetScaler Web Management Interface uses a default password 'nsroot' for the administrator account 'nsroot'. With this information, an attacker can gain complete administrative access to the Citrix NetScaler appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default Password (nsroot) for 'nsroot' Account

The account 'nsroot' on the remote host has the password 'nsroot'. An attacker may leverage this issue to gain administrative access to the affected system. Note that Citrix NetScaler appliances are known to use these credentials to provide complete, administrative access to the Citrix NetScaler...