CVE-2015-2683

Citrix Command Center is affected by CVE-2015-2683 due to improper access restrictions on the Advent JMX Servlet. Affected products are Citrix Command Center 5.1 builds earlier than 35.4 and 5.2 builds earlier than 42.7. The issue allows remote attackers to execute arbitrary code via unspecified ...

CVE-2015-2682

Citrix Command Center (5.1 builds < 35.4; 5.2 builds = 35.4 or 5.2 >= 42.7). There is no explicit exploit code or in-the-wild exploit details provided in the connected documents.

CVE-2015-7999

CVE-2015-7999 describes multiple SQL injection vulnerabilities in Citrix Command Center’s Administration Web UI servlets, affecting 5.1 Build 36.7 and 5.2 Build 44.11 prior builds. The root cause is insufficient input handling during SQL statement construction, enabling remote authenticated users...