PT-2013-4055

Name of the Vulnerable Software and Affected Versions Citrix CloudPortal Services Manager aka Cortex versions prior to 10.0 Cumulative Update 3 Description The issue concerns an unspecified vulnerability with unknown impact and attack vectors. It is distinct from other vulnerabilities listed in...

CVE-2013-2935: Undefined Security Weakness

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2937: Undefined Security Weakness

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, related to debugging messages, a different vulnerability than other CVEs listed in CTX137162...

PT-2013-4053

Name of the Vulnerable Software and Affected Versions Citrix CloudPortal Services Manager aka Cortex versions prior to 10.0 Cumulative Update 3 Description The issue is related to debugging messages and has an unknown impact and attack vectors. It is a distinct vulnerability from others listed in...

CVE-2013-2934: Undefined Security Weakness

Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 does not properly restrict access to web services, which has unspecified impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

PT-2013-4054

Name of the Vulnerable Software and Affected Versions Citrix CloudPortal Services Manager aka Cortex versions prior to 10.0 Cumulative Update 3 Description The issue concerns an unspecified vulnerability with unknown impact and attack vectors. It is distinct from other vulnerabilities listed in...

CVE-2013-2936: Undefined Security Weakness

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2933: Undefined Security Weakness

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

PT-2013-4050

Name of the Vulnerable Software and Affected Versions Citrix CloudPortal Services Manager aka Cortex versions prior to 10.0 Cumulative Update 3 Description The issue is related to improper restriction of access to web services, which may have an unspecified impact. The attack vectors for this iss...

PT-2013-4049

Name of the Vulnerable Software and Affected Versions Citrix CloudPortal Services Manager aka Cortex versions prior to 10.0 Cumulative Update 3 Description The issue concerns an unspecified vulnerability with unknown impact and attack vectors. It is distinct from other vulnerabilities listed in...

PT-2013-3854

Name of the Vulnerable Software and Affected Versions Citrix XenClient XT versions prior to 2.1.3 Citrix XenClient XT version 3.x prior to 3.1.4 Description The issue allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection. Recommendations For versio...

CVE-2013-2939: Undefined Security Weakness

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

PT-2013-4052

Name of the Vulnerable Software and Affected Versions Citrix CloudPortal Services Manager aka Cortex versions prior to 10.0 Cumulative Update 3 Description The issue concerns an unspecified vulnerability with unknown impact and attack vectors. It is distinct from other vulnerabilities listed in...

Citrix Presentation Server 4.5 Multiple Vulnerabilities

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple vulnerabilities : - The application can cause clients to use weaker encryption settings than configured by the administrator, which could allow attackers to bypass intended...

Citrix Presentation Server 4.5 ActiveSync Feature Code Execution

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by a code execution vulnerability in the ActiveSync Feature. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary code on the remote host subject to the privileges...

Citrix Presentation Server 4.5 Code Execution

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple code execution vulnerabilities. By sending a specially crafted packet to the IMA server process, a remote, unauthenticated attacker could execute arbitrary code subject to the...

Citrix AGEE Logon Portal Unspecified XSS

The remote Citrix AGEE web management interface is susceptible to cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid67200; scriptversion"1.13";...

Citrix Web Interface 5.x < 5.4 Unspecified XSS

The remote host contains a version of Citrix Web Interface 5.x earlier than 5.4.0. Such versions are reportedly affected by an as-yet unspecified cross-site scripting vulnerability. An attacker could exploit this issue to steal cookie-based authentication and launch other attacks. C Tenable Netwo...

Citrix NetScaler Web Management Interface Default Administrator Credentials

The remote Citrix NetScaler Web Management Interface uses a default password 'nsroot' for the administrator account 'nsroot'. With this information, an attacker can gain complete administrative access to the Citrix NetScaler appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default Password (nsroot) for 'nsroot' Account

The account 'nsroot' on the remote host has the password 'nsroot'. An attacker may leverage this issue to gain administrative access to the affected system. Note that Citrix NetScaler appliances are known to use these credentials to provide complete, administrative access to the Citrix NetScaler...