Citrix Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Citrix Xen35
Citrix Gateway34
Citrix ADC27
Citrix XenMobile Server19
Citrix XenServer19

Przeciwdziałanie

Official Fix296
Temporary Fix1
Workaround5
Unavailable10
Not Defined40

Wykorzystywanie

High17
Functional2
Proof-of-Concept61
Unproven39
Not Defined233

Wektor dostępu

Not Defined0
Physical2
Local69
Adjacent28
Network253

Uwierzytelnianie

Not Defined0
High4
Low99
None249

Interakcja z użytkownikiem

Not Defined0
Required47
None305

C3BM Index

CVSSv3 Base

≤10
≤21
≤33
≤424
≤536
≤689
≤773
≤857
≤934
≤1035

CVSSv3 Temp

≤10
≤21
≤39
≤428
≤559
≤694
≤763
≤833
≤941
≤1024

VulDB

≤10
≤21
≤34
≤425
≤546
≤691
≤758
≤880
≤913
≤1034

NVD

≤10
≤20
≤30
≤41
≤55
≤614
≤719
≤832
≤913
≤1033

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤91
≤102

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k2
<5k32
<10k122
<25k144
<50k47
<100k4
≥100k1

Wykorzystaj dzisiaj

<1k291
<2k19
<5k23
<10k14
<25k5
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (96): ADC (27), ADC Linux Client (1), ADM (2), Access Gateway (17), Access Gateway Plug-in (1), Access Gateway Plugin (1), AppDNA (1), Application Delivery Controller (4), Application Delivery Management (2), Broadcast Server (1), Citrix Presentation Server (1), Cloud Connector (1), CloudPlatform (4), CloudPortal Services Manager (8), CloudStack (1), Command Center (5), Deterministic Network Enhancer (1), Edgesight For Endpoints (1), Federated Authentication Service (1), Gateway (34), Gateway Linux Client (1), Gateway Plug-in (3), GoToMeeting (1), Hypervisor (3), ICA Client (2), ICA Client for Linux (1), License Server (1), License Server VPX (1), Licensing (1), Licensing Administration Console (1), Linux Virtual Delivery Agent (1), MetaFrame (8), MetaFrame Password Manager (1), MetaFrame Presentation Server (1), Metaframe (3), Metaframe Presentation Server (1), NFuse (2), NetScaler (8), NetScaler ADC (7), NetScaler Appliance (1), NetScaler Gateway (11), NetScaler SDX (1), Netscaler (14), Netscaler Access Gateway (1), Netscaler Application Delivery Controller (16), Netscaler Gateway (15), Netscaler SD-WAN (17), Netscaler VPX (1), Nfuse (4), Nfuse Webserver (1), Online Plug-in (2), Presentation Server (11), Presentation Server Client (1), Program Neighborhood Agent (2), Program Neighborhood Client (1), Provisioning Services (7), Receiver Desktop Lock (1), SD-WAN (15), SD-WAN Center (5), SD-WAN Center Management Console (1), SD-WAN Orchestrator for On-Premises (1), SD-WAN Premium Edition Appliance (2), SD-WAN Standard Edition Appliance (2), SD-WAN WANOP (5), SD-WAN WANOP Edition (2), SDWAN WAN-OP (6), Secure Gateway (2), Secure Mail (2), Server (1), ShareFile (4), ShareFile StorageZones (2), ShareFile Storage Zones Controller (2), ShareFile StorageZones Controller (3), StoreFront (1), Storefront Server (2), Studio (1), VDI-in-a-Box (2), Virtual Apps (4), Virtual Desktops (2), Web Interface (4), Workspace App (7), Worx Home (1), Xen (35), XenApp (7), XenCenterWeb (4), XenClient (1), XenDesktop (9), XenMobile (2), Xen Mobile (2), XenMobile Device Manager Server (1), XenMobile MDX Toolkit (1), XenMobile Server (19), XenServer (19), Zenprise Device Manager Server (1), iOS Receiver (1), program neighborhood client (1)

Link to Vendor Website: https://www.citrix.com/

OpublikowanoBaseTempSłaby punktProdWykPrzCTIEPSSCVE
2023-01-162.01.8Citrix Workspace App ICA Session ctxwebhelper information disclosureConnectivity SoftwareProof-of-ConceptWorkaround0.070.00000
2022-12-275.45.3Citrix ADC/Gateway SSL VPN Endpoint information disclosureConnectivity SoftwareNot DefinedOfficial Fix0.030.00885CVE-2019-18177
2022-12-139.89.6Citrix ADC/Gateway Remote Code ExecutionConnectivity SoftwareNot DefinedOfficial Fix0.040.01156CVE-2022-27518
2022-11-098.58.4Citrix Gateway/ADC VPN weak authenticationConnectivity SoftwareNot DefinedOfficial Fix0.000.00885CVE-2022-27510
2022-11-096.36.2Citrix Gateway/ADC VPN/AAA Virtual Server information disclosureConnectivity SoftwareNot DefinedOfficial Fix0.000.00885CVE-2022-27516
2022-11-098.78.5Citrix Gateway/ADC VPN weak authenticationConnectivity SoftwareNot DefinedOfficial Fix0.060.00885CVE-2022-27513
2022-07-296.26.0Citrix ADC/Gateway RedirectConnectivity SoftwareNot DefinedOfficial Fix0.000.00885CVE-2022-27509
2022-06-153.53.4Citrix ADM License Service denial of serviceConnectivity SoftwareNot DefinedOfficial Fix0.040.00885CVE-2022-27512
2022-06-157.37.0Citrix ADM Admin Password privilege escalationConnectivity SoftwareNot DefinedOfficial Fix0.060.01055CVE-2022-27511
2022-05-268.88.4Citrix Gateway Plug-in privilege escalationConnectivity SoftwareNot DefinedOfficial Fix0.060.00885CVE-2022-21827
2022-05-265.35.1Citrix ADC/Gateway VPN Gateway/AAA Virtual Server denial of serviceConnectivity SoftwareNot DefinedOfficial Fix0.030.00885CVE-2022-27508
2022-05-264.34.1Citrix ADC/Gateway VPN Gateway denial of serviceConnectivity SoftwareNot DefinedOfficial Fix0.060.00885CVE-2022-27507
2022-04-196.36.0Citrix XenMobile Server Create Support Bundle directory traversalConnectivity SoftwareNot DefinedOfficial Fix0.000.04571CVE-2021-44519
2022-04-143.53.4Citrix StoreFront SAML Authentication cross site scriptingConnectivity SoftwareNot DefinedOfficial Fix0.110.00885CVE-2022-27503
2022-04-143.53.4Citrix SD-WAN Standard Edition Appliance cross site scriptingNetwork Management SoftwareNot DefinedOfficial Fix0.030.00885CVE-2022-27505
2022-04-146.86.5Citrix SD-WAN Center Management Console CLI weak authenticationNetwork Management SoftwareNot DefinedOfficial Fix0.030.00885CVE-2022-27506
2022-04-135.55.5Citrix XenMobile Server privilege escalationConnectivity SoftwareNot DefinedNot Defined0.000.02066CVE-2022-26151
2022-04-138.88.8Citrix XenMobile privilege escalationConnectivity SoftwareNot DefinedNot Defined0.060.04571CVE-2021-44520
2022-03-103.53.5Citrix Federated Authentication Service information disclosureConnectivity SoftwareNot DefinedNot Defined0.040.00885CVE-2022-26355
2022-02-106.36.3Citrix Workspace App App Protection privilege escalationConnectivity SoftwareNot DefinedNot Defined0.080.00885CVE-2022-21825
2021-11-103.13.0Citrix ADC/Gateway/SD-WAN WANOP Edition NSIP/SNIP denial of serviceNetwork Management SoftwareNot DefinedOfficial Fix0.050.00885CVE-2021-22956
2021-11-105.35.1Citrix ADC/Gateway VPN Gateway/AAA Virtual Server denial of serviceConnectivity SoftwareNot DefinedOfficial Fix0.050.00885CVE-2021-22955
2021-09-247.37.0Citrix ShareFile Storage Zones Controller privilege escalationConnectivity SoftwareNot DefinedOfficial Fix0.010.00885CVE-2021-22941
2021-08-172.62.6Citrix ShareFile Storage Zones Controller Mitigation Tool weak encryptionConnectivity SoftwareNot DefinedNot Defined0.050.00885CVE-2021-22932
2021-08-064.34.3Citrix ADC/Gateway SAML Service Provider weak authenticationConnectivity SoftwareNot DefinedNot Defined0.050.00885CVE-2021-22927

327 więcej wpisów nie jest pokazywanych

Do you want to use VulDB in your project?

Use the official API to access entries easily!