Vulnerabilities > Citrix > Xenmobile Server > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-06-16 CVE-2017-9231 XXE vulnerability in Citrix Xenmobile Server
XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.
network
low complexity
citrix CWE-611
5.0
5.0
2017-05-05 CVE-2016-6877 Improper Input Validation vulnerability in Citrix Xenmobile Server
Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page.
network
high complexity
citrix CWE-20
5.3
5.3
2016-04-07 CVE-2016-2789 Cross-site Scripting vulnerability in Citrix Xenmobile Server 10.0/10.1/10.3
Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
citrix CWE-79
4.3
4.3