Xenmobile Server@* Security Vulnerabilities and Issues — Xenmobile Server@* CVE List

Lucene search

CitrixXenmobile Server*

9 matches found

CVE•added 2020/08/17 4:15 p.m.•120 views

CVE-2020-8209

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files.

7.5CVSS7.5AI score0.92198EPSS

CVE•added 2018/10/24 9:29 p.m.•58 views

CVE-2018-18014

Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by ...

7.8CVSS7.8AI score0.00039EPSS

CVE•added 2020/08/17 4:15 p.m.•51 views

CVE-2020-8208

Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting (XSS).

6.1CVSS7.3AI score0.0039EPSS

CVE•added 2020/08/17 4:15 p.m.•51 views

CVE-2020-8211

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection.

9.8CVSS9.6AI score0.00525EPSS

CVE•added 2020/08/17 4:15 p.m.•50 views

CVE-2020-8212

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality.

9.8CVSS9.2AI score0.00506EPSS

CVE•added 2020/08/17 4:15 p.m.•47 views

CVE-2020-8210

Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credentials of a service account.

7.5CVSS8.6AI score0.00308EPSS

CVE•added 2018/10/24 9:29 p.m.•40 views

CVE-2018-18013

Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into Java objects in memory, giving rise to a remote code execution vulnerability. NOTE...

7.8CVSS8AI score0.00328EPSS

CVE•added 2020/09/18 9:15 p.m.•36 views

CVE-2020-8253

Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 leads to the ability to access sensitive files.

7.5CVSS8AI score0.0028EPSS

CVE•added 2017/05/05 8:29 p.m.•35 views

CVE-2016-6877

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. NOTE: the vendor reports "our internal analysis of this issue concluded that this was not a valid vulnerability" because an expl...

5.3CVSS5AI score0.00778EPSS