Vulnerabilities > Citrix > Xenapp > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-12-14 CVE-2020-8283 Improper Privilege Management vulnerability in Citrix Virtual Apps and Desktops, Xenapp and Xendesktop
An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.
network
low complexity
citrix CWE-269
critical
9.0
2020-11-16 CVE-2020-8269 Improper Privilege Management vulnerability in Citrix Virtual Apps and Desktops, Xenapp and Xendesktop
An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9
network
low complexity
citrix CWE-269
critical
9.0
2012-12-26 CVE-2012-5161 Remote Code Execution vulnerability in Citrix Xenapp 6.5.0.0
The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors.
network
citrix
critical
9.3