Citrix

Records419All Threatist records

Exploited (KEV)29In CISA KEV

CVSS critical87CVSS 9.0–10.0

CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV

TI-2026-67510 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 95KEV 2026-10-04 TI-2026-60194 Citrix NetScaler Improper Input Validation Vulnerability CRITICAL 100KEV 2026-09-27 TI-2026-60195 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 100KEV 2026-09-27 TI-2026-15872 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 99KEV 2026-09-09 TI-2026-07427 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 95KEV 2026-08-26 TI-2026-02639 Citrix NetScaler Out-of-Bounds Read Vulnerability CRITICAL 99KEV 2026-03-30

Components

Products in the NVD configurations · select one to filter the records

Xenserver 50 records HIGH Netscaler Gateway 42 records CRITICAL Netscaler Application Delivery Controller 40 records CRITICAL Netscaler Gateway Firmware 31 records CRITICAL Application Delivery Controller Firmware 30 records CRITICAL Netscaler Application Delivery Controller Firmware 29 records MEDIUM Xenmobile Server 22 records MEDIUM Gateway 19 records HIGH

Records

22 records in Xenmobile Server · all components

TI-2020-06627 CVE-2020-8209 · GHSA-fx75-7xmm-5hm3

Path traversal in Citrix XenMobile Server

MEDIUM 62

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.43933 Published 2020-08-17 No fix listed CWE-22

TI-2018-07535 CVE-2018-10653 · GHSA-5mvv-g3g9-g2pc

There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server…

MEDIUM 52

There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06675 Published 2018-05-23 No fix listed CWE-611

TI-2021-20120 CVE-2021-44520 · GHSA-gprv-rwf8-ph32

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection…

MEDIUM 47

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05705 Published 2022-04-12 No fix listed CWE-77

TI-2020-06630 CVE-2020-8212 · GHSA-x4hg-6xf8-rv8r

Incorrect authorization in Citrix XenMobile Server

MEDIUM 45

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged fun…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0164 Published 2020-08-17 No fix listed CWE-749

TI-2020-06629 CVE-2020-8211 · GHSA-8cpm-585g-7jm9

Command injection in Citrix XenMobile Server

MEDIUM 45

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0154 Published 2020-08-17 No fix listed CWE-77

TI-2018-13135 CVE-2018-18571 · GHSA-7jjf-xpvq-grpr

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server…

MEDIUM 44

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02594 Published 2019-06-05 No fix listed CWE-287

TI-2018-07530 CVE-2018-10648 · GHSA-fp27-jv32-6mpx

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

MEDIUM 44

There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01217 Published 2018-05-23 No fix listed CWE-434

TI-2021-20119 CVE-2021-44519 · GHSA-7fvj-gp5w-qqpp

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory…

MEDIUM 43

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0282 Published 2022-04-19 No fix listed CWE-22

TI-2022-09607 CVE-2022-26151 · GHSA-rgf2-86fc-62hw

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.

MEDIUM 42

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.073 Published 2022-04-12 No fix listed CWE-77

TI-2018-12818 CVE-2018-18013 · GHSA-cwh4-297m-xrfv

* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall…

LOW 39

* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.02919 Published 2018-10-24 No fix listed CWE-502

TI-2018-07536 CVE-2018-10654 · GHSA-phhp-5h4r-6w6w

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile…

LOW 38

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01209 Published 2018-05-23 No fix listed CWE-502

TI-2020-06671 CVE-2020-8253 · GHSA-mgp8-hj77-63qg

Improper authentication in Citrix XenMobile Server

LOW 36

Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 leads to the ability to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01704 Published 2020-09-18 No fix listed CWE-287

TI-2020-06628 CVE-2020-8210 · GHSA-9gg2-vcvv-996c

Information disclosure in Citrix XenMobile Server

LOW 36

Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credential…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01542 Published 2020-08-17 No fix listed CWE-200

TI-2017-06680 CVE-2017-9231 · GHSA-f7rq-9qg8-cchw

XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before…

LOW 36

XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01812 Published 2017-06-16 No fix listed CWE-611

TI-2018-07534 CVE-2018-10652 · GHSA-465f-q8wj-p994

There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3.

LOW 35

There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01135 Published 2018-05-23 No fix listed CWE-200

TI-2018-07532 CVE-2018-10650 · GHSA-xrgp-qvwm-9p29

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

LOW 35

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00802 Published 2018-05-23 No fix listed CWE-426

TI-2020-06626 CVE-2020-8208 · GHSA-5rpv-q5wq-4v39

Cross-site scripting in Citrix XenMobile Server

LOW 29

Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scri…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2020-08-17 No fix listed CWE-79

TI-2016-02331 CVE-2016-2789 · GHSA-h7p6-26ch-7hv3

Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile…

LOW 29

Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or H…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00796 Published 2016-04-07 No fix listed CWE-79

TI-2018-07533 CVE-2018-10651 · GHSA-rrj2-3phw-cvjj

There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

LOW 28

There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00711 Published 2018-05-23 No fix listed CWE-601

TI-2018-07531 CVE-2018-10649 · GHSA-45q4-4x4x-h7xm

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3.

LOW 28

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00661 Published 2018-05-23 No fix listed CWE-79

TI-2016-05904 CVE-2016-6877 · GHSA-g7jr-3gjx-fr4f

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger…

LOW 27

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page.

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.01275 Published 2017-05-05 No fix listed CWE-20

TI-2018-12819 CVE-2018-18014 · GHSA-cmw7-f487-jf92

* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local…

LOW 25

* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001.

CVSS 3.1MEDIUM 4.8 Local Low privileges User interaction EPSS 0.00484 Published 2018-10-24 No fix listed CWE-287

Open these records in search →