Vulnerabilities > Citrix

DATE CVE VULNERABILITY TITLE RISK
2021-01-06 CVE-2020-8275 Improper Privilege Management vulnerability in Citrix Secure Mail
Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail.
network
citrix CWE-269
4.3
2021-01-06 CVE-2020-8274 Code Injection vulnerability in Citrix Secure Mail
Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail.
network
citrix CWE-94
4.3
2020-12-14 CVE-2020-8283 Improper Privilege Management vulnerability in Citrix Virtual Apps and Desktops, Xenapp and Xendesktop
An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.
network
low complexity
citrix CWE-269
critical
9.0
2020-12-14 CVE-2020-8258 Improper Privilege Management vulnerability in Citrix Gateway Plug-In
Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files.
network
low complexity
citrix CWE-269
5.0
2020-12-14 CVE-2020-8257 Improper Privilege Management vulnerability in Citrix Gateway Plug-In
Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks
network
low complexity
citrix CWE-269
7.5
2020-11-16 CVE-2020-8273 OS Command Injection vulnerability in Citrix Sd-Wan
Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.
network
low complexity
citrix CWE-78
critical
9.0
2020-11-16 CVE-2020-8272 Improper Authentication vulnerability in Citrix Sd-Wan
Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8
network
low complexity
citrix CWE-287
5.0
2020-11-16 CVE-2020-8271 Path Traversal vulnerability in Citrix Sd-Wan
Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8
network
low complexity
citrix CWE-22
critical
10.0
2020-11-16 CVE-2020-8270 OS Command Injection vulnerability in Citrix Virtual Apps and Desktops
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342
network
low complexity
citrix CWE-78
critical
9.0
2020-11-16 CVE-2020-8269 Improper Privilege Management vulnerability in Citrix Virtual Apps and Desktops, Xenapp and Xendesktop
An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9
network
low complexity
citrix CWE-269
critical
9.0