Vulnerabilities > Citrix

DATE CVE VULNERABILITY TITLE RISK
2023-07-10 CVE-2023-24489 Unspecified vulnerability in Citrix Sharefile Storage Zones Controller
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.
network
low complexity
citrix
critical
9.8
2023-07-10 CVE-2023-24490 Unspecified vulnerability in Citrix products
Users with only access to launch VDA applications can launch an unauthorized desktop
network
low complexity
citrix
4.3
2023-07-10 CVE-2023-24486 Unspecified vulnerability in Citrix Workspace
A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched.
local
low complexity
citrix
5.5
2023-07-10 CVE-2023-24487 Unspecified vulnerability in Citrix Application Delivery Controller and Gateway
Arbitrary file read in Citrix ADC and Citrix Gateway?
network
low complexity
citrix
7.5
2023-07-10 CVE-2023-24488 Cross-site Scripting vulnerability in Citrix Application Delivery Controller and Gateway
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway? in allows and attacker to perform cross site scripting
network
low complexity
citrix CWE-79
6.1
2023-02-16 CVE-2023-24483 Improper Privilege Management vulnerability in Citrix Virtual Apps and Desktops
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.
local
low complexity
citrix CWE-269
7.8
2023-02-16 CVE-2023-24484 Unspecified vulnerability in Citrix Workspace 1912/2105/2203.1
A malicious user can cause log files to be written to a directory that they do not have permission to write to.
local
low complexity
citrix
5.5
2023-02-16 CVE-2023-24485 Incorrect Authorization vulnerability in Citrix Workspace 1912/2105/2203.1
Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.
local
low complexity
citrix CWE-863
7.8
2023-01-26 CVE-2022-27507 Resource Exhaustion vulnerability in Citrix Application Delivery Controller and Gateway
Authenticated denial of service
network
low complexity
citrix CWE-400
6.5
2023-01-26 CVE-2022-27508 Resource Exhaustion vulnerability in Citrix Application Delivery Controller and Gateway
Unauthenticated denial of service
network
low complexity
citrix CWE-400
7.5