Citrix vulnerabilities
46 CVEs and advisories name Citrix as an affected vendor, 5 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-24489A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthent
- CVE-2023-24490Users with only access to launch VDA applications can launch an unauthorized desktop
- CVE-2023-24487Arbitrary file read
- CVE-2023-24488Cross site scripting
- CVE-2023-24486Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications
- CVE-2023-24485Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows
- CVE-2023-24484A malicious user can cause log files to be written to a directory that they do not have permission to write to.
- CVE-2023-24483Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA
- CVE-2022-27518Unauthenticated remote arbitrary code execution
- CVE-2022-27516User login brute force protection functionality bypass
- CVE-2022-27510Unauthorized access to Gateway user capabilities
- CVE-2022-27513Remote desktop takeover via phishing
- CVE-2022-27512Temporary disruption of the ADM license service
- CVE-2022-27511Corruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator password
- CVE-2022-27503Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9
- CVE-2022-26355Citrix Federated Authentication Service (FAS)