Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-08-17	CVE-2020-8211	SQL Injection vulnerability in Citrix Xenmobile Server Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection. network low complexity citrix CWE-89 critical	9.8
2020-08-17	CVE-2020-8212	Incorrect Authorization vulnerability in Citrix Xenmobile Server Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality. network low complexity citrix CWE-863 critical	9.8
2019-06-05	CVE-2018-18571	Improper Authentication vulnerability in Citrix Xenmobile Server 10.8.0/10.9.0 An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. network low complexity citrix CWE-287 critical	9.1
2018-05-23	CVE-2018-10648	Unrestricted Upload of File with Dangerous Type vulnerability in Citrix Xenmobile Server 10.7/10.8 There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. network low complexity citrix CWE-434 critical	9.8
2018-05-23	CVE-2018-10653	XXE vulnerability in Citrix Xenmobile Server 10.7/10.8 There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. network low complexity citrix CWE-611 critical	9.8