Vulnerabilities > CVE-2018-10653 - XXE vulnerability in Citrix Xenmobile Server 10.7/10.8

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
citrix
CWE-611
critical
exploit available
NVD
Published: 2018-05-23
Updated: 2020-01-22

Summary

There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

Vulnerable Configurations

Part Description Count
Application
Citrix
5

Common Weakness Enumeration (CWE)

Exploit-Db

idEDB-ID:47951
last seen2020-01-22
modified2020-01-22
published2020-01-22
reporterExploit-DB
sourcehttps://www.exploit-db.com/download/47951
titleCitrix XenMobile Server 10.8 - XML External Entity Injection

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/156037/citrixxms108-xml.txt
idPACKETSTORM:156037
last seen2020-01-23
published2020-01-22
reporterJonas Lejon
sourcehttps://packetstormsecurity.com/files/156037/Citrix-XenMobile-Server-10.8-XML-Injection.html
titleCitrix XenMobile Server 10.8 XML Injection

References