Citrix SD-WAN Security Update

Description of Problem Multiple denial of service vulnerabilities have been identified in the Citrix SD-WAN Appliance and Citrix SD-WAN Center Management Console. These vulnerabilities could permit a remote attacker to cause a denial of service by causing a host crash or by causing reduced servic...

Citrix Hypervisor Security Update.

Description of Problem A vulnerability has been found in Citrix Hypervisor formerly Citrix XenServer that may allow an unauthenticated attacker with the ability to send traffic to a host over a management or storage network to cause the host to crash. This vulnerability is identified as: •...

CVE-2016-9603 - Citrix XenServer Security Update

Description of Problem A security issue has been identified within Citrix XenServer. This issue could, if exploited, allow the administrator of an HVM guest VM to compromise the host. The following vulnerability has been addressed: CVE-2016-9603 High: QEMU: Cirrus VGA Heap overflow via display...

Citrix Workspace app for Windows Security Bulletin CVE-2024-6286

Description of Problem A vulnerability has been discovered that impacts the Citrix Workspace app for Windows. Refer to below for further details: Affected Versions The vulnerability affects the following supported versions of the Citrix Workspace app for Windows Current Release CR Citrix Workspac...

Citrix Provisioning - SoapService errors in the event viewer after installing 2042 CU2

Since installing 2402 CU2 there are multiple errors in the event viewer. The event logged during Citrix PVS Soap Server start: Source: SoapService Event ID: 1 Level: Error Event Data:MapiException: ErrorCodeOtherException An unexpected MAPI error occurred. The event logged every 5 minutes: Source...

The operation is blocked. Session Recording Administrator logging failed

The operation is blocked. Session Recording Administrator logging failed ,when change session recording policies and session recording properties Deselect all the require SSL for application pool of session recording website in iis, issue remains Set...

Citrix Policy Reporter - RSOP CtxCseUtil Tool

CtxCseUtil.exe Created Date: October 24th, 2012 Version: 1.0 Description CtxCseUtil is a tool that can generate resultant set of policy RSOP report per computer, per user or both for Citrix policies on a device that has the Group Policy Management Console installed. Please note: You can download...

Session Launch Failure: “Your session 'AppName' did not launch successfully due to error code 3500

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When launching an application or desktop session using Citrix Workspace App, the session fails to...

Users prompted for the message "Please close your browser to protect your account"

When using Storefront and SAML or smart card authentication, after the user logs off or the session times out, if the user tries to log back in an error is displayed. With Smartcard the error is You cannot log on using a smart card Please close your browser to protect your account SAML...

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or may not impact your systems. Cloud Software Group, Inc. and its subsidiaries collectively, "Clou...

はじめてのCitrixテクニカルサポート - 準備と手順

この文書では、Customer Success Servicesご購入後初めてテクニカルサポートをご利用されるお客様を対象として、以下の項目について説明しています。 テクニカルサポートへのお問い合わせ手順 重大な停止のお問い合わせ 365日24時間サポートのご利用 Renewal Contact （リニューアルコンタクト） ご担当者の変更...

Citrix ShareFile Storage Zones Controller Security Update

A security issue has been identified in Citrix ShareFile storage zones controller which, if exploited, would allow an unauthenticated attacker to remotely compromise the storage zones controller. The issue has been given the following identifier:CVE-ID| Description| Type| Pre-requisites...

Error 2320 - Cannot start apps. Please run Reset Citrix Workspace to resolve a lockdown conflict for LegacyLocalUserNameAndPassword

When trying to launch the applications through the Native Workspace App you get an error stating 'Cannot start apps. Please run Reset Citrix Workspace to resolve a lockdown conflict for LegacyLocalUserNameAndPassword'. Resetting Workspace App does not resolve the issue...

Failed to launch session "session_name". Error code: 2524 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error code is returned by the Citrix Gateway to CWA appwhen application/desktop launch...

CVE-2018-3639 - Citrix XenServer Security Update

Description of Problem CVE-2018-3639 Speculative Store Bypass Disable is an issue that may affect third-party software that runs in guest VMs on Citrix XenServer. This is not an issue caused by Citrix XenServer and Citrix is unaware of any means of exploiting this issue against XenServer itself...

FAQ: Citrix Secure Gateway/ NetScaler Gateway Secure Ticket Authority

Note : The same principles and concepts holds good for NetScaler Gateway as well. This article answers some frequently asked questions regarding the Citrix Secure Ticket Authority STA. The questions are divided into following four categories: Overview Q: What is the Secure Ticket Authority? Q: Wh...

NetScaler - Error "Registration of device failed" when adding license server.

After recently deploying and registering a NetScaler Console formerly ADM Agent and trying to add it as a license server on a NetScaler device you get the error "Registration of device failed Sending request to mgmtserver failed"...

Citrix Hypervisor Security Update

Description of Problem Several security issues have been identified in Citrix Hypervisor formerly Citrix XenServer that may allow privileged code in a guest VM to cause the host to crash or become unresponsive. In addition, unprivileged code in a PV guest VM may be able to cause that guest VM to...

CVE-2019-11634 - Improper Access Control Vulnerability in AppDNA

Description of Problem A vulnerability has been identified in AppDNA that could result in access controls not being enforced when accessing the web console potentially allowing privilege escalation and remote code execution. This vulnerability has been assigned the following CVE number: •...

Hotfix XS82ECU1085 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. Note: Citrix Hypervisor 8.2 Cumulative Update 1 reaches end of life on Jun 25, 2025. Upgrade toXenServer...

How to Configure StoreFront and Smart Card Authentication for Internal Users using Stores

This article describes how to configure Citrix StoreFront 2.0 and Smart Card authentication using Gemalto .NET cards against stores for internal users. Requirements The following components are needed to allow users connectthrough Smart Card to StoreFront: Citrix StoreFront 2.x Citrix Receiver fo...

NetScaler Console, Agent and SDX (SVM) Security Bulletin for CVE-2024-6235 and CVE-2024-6236

Description of Problem Two vulnerabilities have been discovered in NetScaler Console formerly NetScaler ADM, NetScaler SDX SVM, and NetScaler Agent. Refer to below for further details: Affected Versions The following supported version of NetScaler Console formerly NetScaler ADM is affected by...

Citrix Hypervisor Security Bulletin for CVE-2022-33748 & CVE-2022-33749

Several security issues have been identified in Citrix Hypervisor 8.2 LTSR CU1. These are: A malicious privileged user in a guest VM working in collaboration with a malicious privileged user in another guest VM can cause the host to crash or become unresponsive. This issue has the following CVE...

Citrix XenServer Multiple Security Updates

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServe...

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update

Description of Problem Multiple vulnerabilities have been discovered in Citrix ADC formerly known as NetScaler ADC, Citrix Gateway formerly known as NetScaler Gateway and Citrix SD-WAN WANOP appliance models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could result...

Citrix Endpoint Management (CEM) Security Update

Description of Problem Multiple vulnerabilities have been discovered inCitrix Endpoint Management CEM,also referred to asXenMobile. These vulnerabilitieshavethe following identifiers: CVE-2020-8208 CVE-2020-8209 CVE-2020-8210 CVE-2020-8211 CVE-2020-8212 CVE-2020-8253 The following versions ofCitr...

Error: "Execute Commands failed" When Enabling AppFlow from NetScaler MAS

Enabling AppFlow from NetScaler MAS fails with the error message: Execute Commands failed. Config logs /var/mps/log/mpsconfig.log: Wednesday, 10 Jan 18 11:55:20.075 -0500 Error 1 SSH Command Timed out on Wednesday, 10 Jan 18 11:56:20.080 -0500 Error Main SSH: Failed to connect on Wednesday, 10 Ja...

CVE-2017-15597 - Citrix XenServer Security Update

Description of Problem A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix XenServer 7.2. The...

Purpose of CMSTART command

This article provides information about the command CMSTART. Purpose of CMSTART command Cmstart.exe is a process that runs when you log on to the XenApp server. It is called by winlogon. It is associated with Wfshell.exe, CltMgr.exe, and Icast.exe files. The cmstart is controlled by the following...

Unable open PVS console: The specified authorization group does not exist

Unable open PVS console:The specified authorization group does not exist...

CVE-2018-3665 - Citrix XenServer Security Update

Description of Problem An issue has been identified in certain CPUs that may allow code running in a guest VM to read data from another process in the same VM or another VM running on the same host. The data that can be read is limited to specific CPU registers rather than memory or disk storage;...

CVE-2017-17549 - Information Disclosure in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway Client TLS Handshake

Description of Problem A vulnerability has been identified in the Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway Packet Engine that could result in the disclosure of cleartext traffic from the backend client TLS handshake. This vulnerability only affects connections...

FAS raises error "Server [*****$] is not authorized to assert identities using rule

After clicking the icon, the APP launch fails with following event log on FAS server Log Name: Application Source: Citrix.Authentication.FederatedAuthenticationService Date: 7/12/1999 10:10:04 AM Event ID: 101 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: FASTEST.fasS.c...

Provisioning Services: Service Account Permissions and Configuration for Accessing PVS SQL Database

This article provides a description on how different service accounts should be configured to grant adequate SQL permissions. Service Account Configuration for Accessing SQL Service users are the accounts under which the Stream and Soap services run on a Provisioning Services PVS server which nee...

Launching Citrix Studio results in Error Id: XDDS:62B4A47D

Launching Citrix Studio results in 'Reenter the Controller address or enter a new address.' withError Id: XDDS:62B4A47D...

How generate a Citrix Cloud bearer token and use it on a PowerShell API query

This article outlines the steps to generate a Citrix Cloud bearer tokenand use it on a PowerShell API query...

Error:"resource already exists" When Installing a Certificate on NetScaler Appliance

When you install a certificate on the NetScaler appliance, the following error message appears: "resource already exists" Background When you create certificates, each certificate must have a unique serial number. Additionally, the certificate has the following components that help identify a...

Citrix Hypervisor Security Update

Description of Problem Two issues have been identified in Citrix Hypervisor that may, in certain configurations, allow privileged code in an HVM guest VM to execute code in the control domain, potentially compromising the host. These vulnerabilities affect all currently supported versions of Citr...

How to troubleshoot PVS TD bootup error 'BNIStack failed,network stack could not be initialized'

In PVS environment, a very common error is the 'BNIStack failed' loop restart error During target device boot up, a 'BNIStack failed,network stack could not be initialized' occur, then target device had to reboot again, and the next new bootup encounter same error and reboot again and again. This...

Citrix DaaS - Unable to change Master image for the machine catalog

When attempting to use the "Change Master Image" option in the machine catalog properties, the process may fail with the following error: "Preparation of the Master VM Image failed. Make sure that the selected image is a supported OS and has a valid VDA installed" However creating a new catalog...

Citrix Virtual Apps and Desktops 2402 CU2 expired certificate

Citrix Virtual Apps and Desktops CVAD 2402 LTSR Cumulative Update 2 CU2 2402.0.2100 contains installers and binaries signed with a now-expired code signing certificate. File signatures are considered valid if either: A timestamp was included at the time of signing, or The certificate used for...

BGP Routing and RHI Functionality in NetScaler

This article provides information about BGP routing in NetScaler and some of the sample BGP configurations. It gives a brief overview of the RHI functionality. Route Health Injection RHI The primary purpose of dynamic routing in NetScaler is to communicate the state or health of VIPs to the...

EPA Scan failure on MacOS with error message "Error during unzipping libraries"

EPA scan failed on MacOS client withfollowing errors in "/Library/Application Support/Citrix/EPAPlugin/ " logs: Error during unzipping libraries NSAppleScriptErrorAppName = CitrixEndpointAnalysis; NSAppleScriptErrorBriefMessage = "unzip: cannot find or open 1/Library/Application...

Citrix Hypervisor Security Bulletin for CVE-2022-42316, CVE-2022-42317 & CVE-2022-42318

Description of Problem Several security issues have been identified in Citrix Hypervisor 8.2 LTSR CU1, each of which may allow a privileged user in a guest VM to cause part of the management service to become unresponsive, resulting in the inability to create new guests or modify the configuratio...

RDP session fails to open, black screen appears briefly and the connection stops

Cannot start RDP session on VDA. A black screen appears briefly and the connection stops...

Citrix XenServer Security Update

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that have deployment-dependent impacts. These issues affect the following supported versions of Citrix XenServer: Citrix XenServer 7.6 Citrix XenServer 7.5 Citrix XenServer 7.1 LTSR CU1 Citrix...

How to Check Citrix Maintenance Program Expiration Dates

This article provides instructions on how to check the current expiration date of Subscription Advantage, Customer Success Services CSS, Appliance Maintenance, and Hardware Warranty memberships on Citrix product by using the My Account web portal. Background Customers can locate a list of license...

Citrix Receiver gives error "HDX Engine Stopped Working"

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information...

Critical Error: "An error occurred communicating with the Server" when adding a server to a store

When adding a server to a store in PVS console, the console hangs, then after a few seconds the message Critical Error: "An error occurred communicating with the Server" is seen, and the soap service crashes. A soap service crash dump may show an exception due to the stack overflow, where it has...

CWA 2503 for MAC - Error “There is no Citrix SSL server configured on the specified address

Issue with a users who is unable to launch applications from Citrix Workspace for Mac. When trying to launch an application, the following error is displayed: “Failed to start. There is no Citrix SSL server configured on the specified address.” Issue only occurring for CWA Mac...