CVE-2016-4945: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vpn/js/gatewayloginformview.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSCTMAC cookie...

PT-2016-6154

Name of the Vulnerable Software and Affected Versions Citrix Studio versions prior to 7.6.1000 Citrix XenDesktop 7.x versions prior to 7.6 LTSR Cumulative Update 1 CU1 Citrix XenApp versions 7.5 and 7.6 Description The issue allows attackers to set Access Policy rules on the XenDesktop Delivery...

XenMobile POC Cheat Sheet

The purpose of this cheat sheet is to provide a detailed POC checklist to assist with the implementation of On-Premise POC implementations. This checklist includes a detailed diagram of your XenMobile POC implementation populated from the information included in the filled out checklist. Addition...

PT-2016-6184

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Gateway versions prior to 11.0 Build 66.11 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the NSC TMAC cookie. This occurs in the vpn/js/gateway login form view....

CVE-2016-4810: Improper Access Control

Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 CU1, and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Controller via unspecified vectors...

CVE-2016-4810 - Vulnerability in Citrix Studio Could Result in Insecure Access Policy Configuration

Description of Problem A vulnerability has been identified in Citrix Studio that could allow Access Policy rules to be set insecurely on the Citrix XenDesktop Delivery Controller. This vulnerability affects the following product versions: Citrix XenDesktop 7.x between versions 7.0 and 7.6...

Citrix NetScaler Gateway Login Form Hijacking Vulnerability (CTX213313)

Citrix NetScaler is prone to a login form hijacking vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix Netscaler 11.0 Build 64.35 Cross Site Scripting

PERSICON Security Advisory ======================================================================= Title: Login Form Hijacking vulnerability Product: Citrix Netscaler Vulnerable Version: 11.0 Build 64.35 Fixed Version: 11.0 Build 66.11 CVE-ID: CVE-2016-4945 Impact: medium found: 2015-04-07 by: Dr...

Citrix XenServer Multiple Vulnerabilities (CTX212736)

The version of Citrix XenServer running on the remote host is affected by multiple vulnerabilities in the bundled versions of OpenSSL and QEMU : - Multiple flaws exist in the bundled version of OpenSSL in the aesnicbchmacsha1cipher and aesnicbchmacsha256cipher functions that are triggered when th...

Process Shows "Starting Application", Freezes When Launching Applications from Receiver for iOS or From Browser on iOS Devices

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When trying to launch an application from and iOS device using the browser or the Citrix Receiver, t...

F5 Networks BIG-IP : Libpng vulnerability (K81903701)

Buffer overflow in the pngsetPLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a small...

Where to Locate and Download Citrix Product Software

This article provides instructions on where to locate and download product software. Requirements To acquire software for products purchased you must log in to your Citrix My Account with a username and password associated to the account that the product resides in. Background Most products requi...

Citrix XenServer Multiple Security Updates (CTX212736)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM depending on configuration or an attacker on the management network to compromise the host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might b...

Error: "Cannot add account" When Connecting Through iOS Receiver 6.1.4

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is received when connecting through iOS Receiver 6.1.4: "Cannot add account" The...

How To perform Emergency Network Reset on Citrix Hypervisor/XenServer

To configure or restore the management interface from either XSCONSOLE or from CLI command-line interface...

Citrix Receiver Error "Unable To Login" When Connecting To StoreFront With SSON Enabled

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When users attempt to run an applicationfrom Citrix Receiver they are presented with an error messag...

FAQ: Apple's Device Enrollment Program and Citrix Secure Hub Auto Install

Q: How to download and install Citrix Secure Hub automatically during DEP initial setup without the user searching the AppStore? A : The capability to install Secure Hub during DEP initial setup of a device is supported with XenMobile 10.3.x Server and later: All you need to do is to push the...

Getting Started with Citrix Secure Web

The purpose of this getting started guide is to provide a reference document with key information about Citrix Citrix Secure Web. Navigation: What is Citrix Secure Web? Citrix Secure Web MicroVPN Connection Modes Supported Web Technologies Configure Citrix Secure Web and Proxy Servers MicroVPN...

Getting Started with Citrix Secure Mail

The purpose of this getting started guide is to provide a reference document with key information about Citrix Citrix Secure Mail. Navigation: What is Secure Mail? Citrix Secure Mail Connection Modes List of Supported Mail Servers Citrix Secure Mail w/ IBM Notes Supported File Formats Push...

Citrix Endpoint Management (XenMobile) Server Support Bundle Overview

The following table has key information about Citrix Endpoint Management XenMobile Server Support Bundle. For additional information please review the following link. This includes: List of log files included in the bundle Log type Description of what is included in the log file Analytical value ...