Xenmobile Server Security Vulnerabilities and Issues — Xenmobile Server CVE List

Lucene search

CitrixXenmobile Server

7 matches found

CVE•added 2022/04/13 12:15 a.m.•105 views

CVE-2021-44520

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.

9CVSS9.2AI score0.06128EPSS

CVE•added 2022/04/13 12:15 a.m.•96 views

CVE-2022-26151

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.

9CVSS7.4AI score0.02459EPSS

CVE•added 2018/05/23 5:29 p.m.•74 views

CVE-2018-10653

There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

9.8CVSS9.3AI score0.0922EPSS

CVE•added 2020/08/17 4:15 p.m.•51 views

CVE-2020-8211

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection.

9.8CVSS9.6AI score0.00525EPSS

CVE•added 2020/08/17 4:15 p.m.•50 views

CVE-2020-8212

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality.

9.8CVSS9.2AI score0.00506EPSS

CVE•added 2019/06/05 3:29 p.m.•43 views

CVE-2018-18571

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management (MAM) enrolled device.

9.1CVSS9.2AI score0.00335EPSS

CVE•added 2018/05/23 5:29 p.m.•39 views

CVE-2018-10648

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

9.8CVSS9.5AI score0.0061EPSS