| CVE-2023-24488 | MEDIO6.1 | Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting | 10/07/2023 |
| CVE-2023-24487 | ALTO7.5 | Arbitrary file read in Citrix ADC and Citrix Gateway | 10/07/2023 |
| CVE-2023-24486 | MEDIO5.5 | A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched. | 10/07/2023 |
| CVE-2023-24485 | ALTO7.8 | Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app. | 16/02/2023 |
| CVE-2023-24484 | MEDIO5.5 | A malicious user can cause log files to be written to a directory that they do not have permission to write to. | 16/02/2023 |
| CVE-2023-24483 | ALTO7.8 | A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA. | 16/02/2023 |
| CVE-2022-27508 | ALTO7.5 | Unauthenticated denial of service | 26/01/2023 |
| CVE-2022-27507 | MEDIO6.5 | Authenticated denial of service | 26/01/2023 |
| CVE-2019-18177 | MEDIO6.5 | In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update. | 26/12/2022 |
| CVE-2022-27516 | CRÍTICO9.8 | User login brute force protection functionality bypass
| 08/11/2022 |
| CVE-2022-27513 | CRÍTICO9.6 | Remote desktop takeover via phishing
| 08/11/2022 |
| CVE-2022-27510 | CRÍTICO9.8 | Unauthorized access to Gateway user capabilities
| 08/11/2022 |
| CVE-2022-27509 | MEDIO6.1 | Unauthenticated redirection to a malicious website | 28/07/2022 |
| CVE-2022-27512 | MEDIO5.3 | Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM. | 16/06/2022 |
| CVE-2022-27511 | ALTO8.1 | Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted. | 16/06/2022 |
| CVE-2022-21827 | ALTO7.1 | An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM. | 26/05/2022 |
| CVE-2021-44519 | ALTO8.8 | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution. | 19/04/2022 |
| CVE-2022-27506 | BAJO2.7 | Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI | 13/04/2022 |
| CVE-2022-27503 | MEDIO6.1 | Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9 | 13/04/2022 |
| CVE-2022-26151 | ALTO7.2 | Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection. | 13/04/2022 |