CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

CVE-2019-19390

The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues...

CVE-2019-19500

Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment field of a special order for individual software...

CVE-2013-4679

Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges via an application that performs crafted interaction with the operating system...

CVE-2005-1676

Multiple cross-site scripting XSS vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the 1 picture columns embedded within...

NetScaler Gateway - App launch failure Error: "Session reconnection timeout"

Users attempts to launch an application externally via NetScaler Gateway and observed the below error Application launch fails consistently and the behavior is same with both web browser and the Citrix Workspace Application...

Graphical Issues with Citrix Workspace App 2503 and Intel GPUs

Customers using the Citrix Workspace App for Windows version 2503 or later on Windows endpoint devices, like the Microsoft Surface Pro laptops equipped with specific Intel GPUs using older Intel drivers, may encounter graphical anomalies. These issues can manifest as visual artefacts or black box...

DaaS - Client IP detection for Network Location Service

How is actual Client IP determined for Network location detection, when traffic from both internal and external Clients is routed through a Proxy? This is important when Clients access the Cloud Workspace through a Proxy, irrespective of Client's location - inside or outside corporate network...

CWA 2503 for MAC - Error “There is no Citrix SSL server configured on the specified address

Issue with a users who is unable to launch applications from Citrix Workspace for Mac. When trying to launch an application, the following error is displayed: “Failed to start. There is no Citrix SSL server configured on the specified address.” Issue only occurring for CWA Mac...

Remove the Send anonymous usage statistics options at preferences at Storefront

To remove the option of sending anonymous usage statistics to improve Citrix Workspace app at preferences for Stores...

Unable to take control during a Teams session with a Linux Workspace

Unable to take control during a Teams session with a Linux Workspace...

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Planning Analytics Workspace. For more information about the vulnerability impact, refer to the table in the "Related Information" section. This Security Bulletin relates only to the direct usage of...

Perfection is a Myth. Leverage Isn't: How Small Teams Can Secure Their Google Workspace

Let's be honest: if you're one of the first or the first security hires at a small or midsize business, chances are you're also the unofficial CISO, SOC, IT Help Desk, and whatever additional roles need filling. You're not running a security department. You are THE security department. You're...

CWA Mac 2503: Launch Failure “no Citrix SSL server configured on the specified address”

Users who are on Citrix Workspace app for Mac 2503, attempting to launch Citrix sessions, may encounter a failure. The following error message is displayed to the end user: “No Citrix SSL Server configured on the specified address." as below...

Citrix DaaS Workspace Core - Domain is unreachable Error

When using DaaS quick create to create directory connection for AWS workspace core , error prompts "Domain not found" and Status shows "Invalid Account"...

CVE-2023-42404

OneVision Workspace before WS23.1 SR1 build w31.040 allows arbitrary Java EL execution...

CWAL 2311 | Failed to register YUBI key on VDA desktop

Failed to register Yubi Key in workspace app for Linux.http://webauthn.io/webauthn.io registration works and onlyhttps://webauthn.me/debuggerwebauthn.me site registration fail...

CVE-2023-42404

OneVision Workspace before WS23.1 SR1 build w31.040 allows arbitrary Java EL execution...

CVE-2023-42404

OneVision Workspace before WS23.1 SR1 build w31.040 allows arbitrary Java EL execution...

Dust: Stored XSS in File Upload Leads to Privilege Escalation and Full Workspace Takeover

A stored cross-site scripting XSS vulnerability was discovered in the Dust platform's file upload functionality. An attacker could upload a malicious HTML file to a conversation. When another user, including an admin, visited the uploaded file, JavaScript was executed in their authenticated brows...