Citrix Schwachstellen

Zeitverlauf

Typ

Produkt

Citrix Gateway36
Citrix Xen35
Citrix ADC29
Citrix XenMobile Server19
Citrix XenServer19

Massnahmen

Official Fix318
Temporary Fix1
Workaround5
Unavailable10
Not Defined38

Ausnutzbarkeit

High25
Functional3
Proof-of-Concept61
Unproven39
Not Defined244

Zugriffsart

Not Defined0
Physical2
Local73
Adjacent32
Network265

Authentisierung

Not Defined0
High5
Low107
None260

Benutzeraktivität

Not Defined0
Required52
None320

C3BM Index

CVSSv3 Base

≤10
≤21
≤33
≤424
≤537
≤695
≤776
≤863
≤936
≤1037

CVSSv3 Temp

≤10
≤21
≤39
≤428
≤561
≤699
≤766
≤839
≤943
≤1026

VulDB

≤10
≤21
≤34
≤426
≤549
≤695
≤760
≤887
≤914
≤1036

NVD

≤10
≤20
≤30
≤41
≤55
≤615
≤721
≤838
≤915
≤1033

CNA

≤10
≤20
≤30
≤40
≤51
≤63
≤72
≤81
≤94
≤105

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤91
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k2
<5k33
<10k131
<25k152
<50k47
<100k6
≥100k1

Exploit heute

<1k316
<2k18
<5k16
<10k15
<25k7
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (102): ADC (29), ADC Linux Client (1), ADM (2), Access Gateway (17), Access Gateway Plug-in (1), Access Gateway Plugin (1), AppDNA (1), Application Delivery Controller (4), Application Delivery Management (2), Broadcast Server (1), Citrix Presentation Server (1), Cloud Connector (1), CloudPlatform (4), CloudPortal Services Manager (8), CloudStack (1), Command Center (5), Deterministic Network Enhancer (1), Edgesight For Endpoints (1), Federated Authentication Service (1), Gateway (36), Gateway Linux Client (1), Gateway Plug-in (3), GoToMeeting (1), Hypervisor (3), ICA Client (2), ICA Client for Linux (1), License Server (1), License Server VPX (1), Licensing (1), Licensing Administration Console (1), Linux Virtual Delivery Agent (1), MetaFrame (8), MetaFrame Password Manager (1), MetaFrame Presentation Server (1), Metaframe (3), Metaframe Presentation Server (1), NFuse (2), NetScaler (8), NetScaler ADC (14), NetScaler Appliance (1), NetScaler Gateway (18), NetScaler SDX (1), Netscaler (14), Netscaler Access Gateway (1), Netscaler Application Delivery Controller (16), Netscaler Gateway (15), Netscaler SD-WAN (17), Netscaler VPX (1), Nfuse (4), Nfuse Webserver (1), Online Plug-in (2), Presentation Server (11), Presentation Server Client (1), Program Neighborhood Agent (2), Program Neighborhood Client (1), Provisioning Services (7), Receiver Desktop Lock (1), SD-WAN (15), SD-WAN Center (5), SD-WAN Center Management Console (1), SD-WAN Orchestrator for On-Premises (1), SD-WAN Premium (1), SD-WAN Premium Edition Appliance (2), SD-WAN Standard (1), SD-WAN Standard Edition Appliance (2), SD-WAN WANOP (5), SD-WAN WANOP Edition (2), SDWAN WAN-OP (6), Secure Access Client (2), Secure Gateway (2), Secure Mail (2), Server (1), ShareFile (4), ShareFile StorageZones (2), ShareFile StorageZones Controller (4), ShareFile Storage Zones Controller (2), StoreFront (2), Storefront Server (2), Studio (1), VDI-in-a-Box (2), Virtual Apps (4), Virtual Apps and Desktops (3), Virtual Delivery Agent (1), Virtual Desktops (2), Web Interface (4), Workspace App (9), Workspace app (1), Worx Home (1), Xen (35), XenApp (7), XenCenterWeb (4), XenClient (1), XenDesktop (9), XenMobile (2), Xen Mobile (2), XenMobile Device Manager Server (1), XenMobile MDX Toolkit (1), XenMobile Server (19), XenServer (19), Zenprise Device Manager Server (1), iOS Receiver (1), program neighborhood client (1)

Link to Vendor Website: https://www.citrix.com/

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
12.03.20246.96.8Citrix SD-WAN Standard/SD-WAN Premium erweiterte RechteNetwork Management SoftwareNot DefinedOfficial Fix0.000430.00CVE-2024-2049
16.01.20247.77.6Citrix NetScaler ADC/NetScaler Gateway PufferüberlaufNetwork Management SoftwareHighOfficial Fix0.005970.00CVE-2023-6549
16.01.20246.96.8Citrix NetScaler ADC/NetScaler Gateway NSIP/CLIP/SNIP erweiterte RechteNetwork Management SoftwareHighOfficial Fix0.015680.03CVE-2023-6548
16.01.20245.45.4Citrix Virtual Apps and Desktops Session Recording Privilege EscalationConnectivity SoftwareNot DefinedOfficial Fix0.000500.03CVE-2023-6184
16.01.20245.35.2Citrix StoreFront Cross Site ScriptingConnectivity SoftwareNot DefinedOfficial Fix0.000950.00CVE-2023-5914
27.10.20237.77.6Citrix NetScaler ADC/NetScaler Gateway PufferüberlaufNetwork Management SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-4967
10.10.20238.38.2Citrix NetScaler ADC/NetScaler Gateway OpenID openid-configuration ns_aaa_oauthrp_send_openid_config CitrixBleed PufferüberlaufNetwork Management SoftwareHighOfficial Fix0.968690.09CVE-2023-4966
18.07.20239.89.6Citrix NetScaler ADC/NetScaler Gateway erweiterte RechteConnectivity SoftwareHighOfficial Fix0.911860.00CVE-2023-3519
18.07.20238.07.9Citrix NetScaler ADC/NetScaler Gateway Management Interface erweiterte RechteConnectivity SoftwareNot DefinedOfficial Fix0.000430.04CVE-2023-3467
18.07.20236.46.4Citrix NetScaler ADC/NetScaler Gateway Cross Site ScriptingConnectivity SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-3466
11.07.20237.87.5Citrix Secure Access Client erweiterte RechteConnectivity SoftwareNot DefinedOfficial Fix0.000430.02CVE-2023-24491
11.07.20238.28.1Citrix Secure Access Client erweiterte RechteConnectivity SoftwareNot DefinedOfficial Fix0.001590.03CVE-2023-24492
13.06.20235.95.8Citrix Virtual Apps and Desktops/Virtual Delivery Agent erweiterte RechteConnectivity SoftwareNot DefinedOfficial Fix0.000450.00CVE-2023-24490
13.06.20239.89.6Citrix ShareFile StorageZones Controller erweiterte RechteConnectivity SoftwareNot DefinedOfficial Fix0.974290.00CVE-2023-24489
11.05.20234.34.1Citrix ADC/Gateway Cross Site ScriptingConnectivity SoftwareNot DefinedOfficial Fix0.072180.01CVE-2023-24488
11.05.20235.55.3Citrix ADC/Gateway NSIP/SNIP Remote Code ExecutionConnectivity SoftwareNot DefinedOfficial Fix0.000870.00CVE-2023-24487
11.03.20235.34.9Citrix Workspace app ICA File erweiterte RechteConnectivity SoftwareFunctionalOfficial Fix0.000420.05CVE-2023-24486
17.02.20235.55.4Citrix Workspace App Log File erweiterte RechteConnectivity SoftwareNot DefinedOfficial Fix0.000430.04CVE-2023-24484
16.02.20237.87.6Citrix Workspace App erweiterte RechteConnectivity SoftwareNot DefinedOfficial Fix0.000430.04CVE-2023-24485
16.02.20237.87.6Citrix Virtual Apps and Desktops erweiterte RechteConnectivity SoftwareNot DefinedOfficial Fix0.000420.03CVE-2023-24483
16.01.20232.01.8Citrix Workspace App ICA Session ctxwebhelper Information DisclosureConnectivity SoftwareProof-of-ConceptWorkaround0.000000.00
27.12.20225.45.3Citrix ADC/Gateway SSL VPN Endpoint Information DisclosureConnectivity SoftwareNot DefinedOfficial Fix0.000640.03CVE-2019-18177
13.12.20229.89.6Citrix ADC/Gateway Remote Code ExecutionConnectivity SoftwareNot DefinedOfficial Fix0.242080.04CVE-2022-27518
09.11.20228.58.4Citrix Gateway/ADC VPN schwache AuthentisierungConnectivity SoftwareNot DefinedOfficial Fix0.001370.04CVE-2022-27510
09.11.20226.36.2Citrix Gateway/ADC VPN/AAA Virtual Server Information DisclosureConnectivity SoftwareNot DefinedOfficial Fix0.001900.03CVE-2022-27516

347 weitere Einträge werden nicht mehr angezeigt

Do you want to use VulDB in your project?

Use the official API to access entries easily!