CVE-2017-9231 in XenMobile Server

Summary

XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 05/24/2017
• Disclosure: 06/16/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-102640
• CPE: ready
• CWE: CWE-611 (Confirmed)
• CVSS: 6.4
• EPSS: 0.00403
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-9231
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-9231
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-9231/