CVE-2016-6493

CRITICAL 9.8CVE-2016-6493 · Published 19/08/2016 · updated 17/06/2026

In short

CVE-2016-6493 is a CRITICAL (CVSS 9.8) vulnerability affecting xenapp (citrix), xendesktop (citrix).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xenapp citrix	`= 6.0.0.0= 6.5.0.0= 7.0.0.0= 7.1.0.0= 7.5.0.0= 7.6.0.0= 7.7.0.0= 7.8.0.0`	No fix yet
xendesktop citrix	`≤ 7.8`	No fix yet

Description

Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.

References

support.citrix.com/article/CTX215460 · Vendor Advisory
securityfocus.com/bid/92316 · Third Party Advisory
securitytracker.com/id/1036539 · Third Party Advisory

More vulnerabilities in xenapp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

xenapp

citrix

= 6.0.0.0= 6.5.0.0= 7.0.0.0= 7.1.0.0= 7.5.0.0= 7.6.0.0= 7.7.0.0= 7.8.0.0

No fix yet

xendesktop

citrix

≤ 7.8

No fix yet

More vulnerabilities in xenapp

See all →