Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Priority LOW 26

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00176 Published 2024-09-11 Fixed in 2405, 2402 LTSR CU1 CWE-269
Priority LOW 30

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00153 Published 2024-09-10 No fix listed CWE-863
Priority LOW 24

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00185 Published 2023-07-10 Fixed in 2302 CWE-284
Priority LOW 33

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00223 Published 2022-02-09 No fix listed CWE-284
Priority LOW 34

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2021-05-27 No fix listed CWE-284
Priority MEDIUM 42

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02062 Published 2020-07-24 No fix listed CWE-284