CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 16/02/2023 |
| CVE-2023-24484 | MOYENNE5.5 | A malicious user can cause log files to be written to a directory that they do not have permission to write to. | 16/02/2023 |
| CVE-2023-24483 | ÉLEVÉE7.8 | A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA. | 16/02/2023 |
| CVE-2022-27508 | ÉLEVÉE7.5 | Unauthenticated denial of service | 26/01/2023 |
| CVE-2022-27507 | MOYENNE6.5 | Authenticated denial of service | 26/01/2023 |
| CVE-2019-18177 | MOYENNE6.5 | In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update. | 26/12/2022 |
| CVE-2022-27516 | CRITIQUE9.8 | User login brute force protection functionality bypass
| 08/11/2022 |
| CVE-2022-27513 | CRITIQUE9.6 | Remote desktop takeover via phishing
| 08/11/2022 |
| CVE-2022-27510 | CRITIQUE9.8 | Unauthorized access to Gateway user capabilities
| 08/11/2022 |
| CVE-2022-27509 | MOYENNE6.1 | Unauthenticated redirection to a malicious website | 28/07/2022 |
| CVE-2022-27512 | MOYENNE5.3 | Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM. | 16/06/2022 |
| CVE-2022-27511 | ÉLEVÉE8.1 | Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted. | 16/06/2022 |
| CVE-2022-21827 | ÉLEVÉE7.1 | An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM. | 26/05/2022 |
| CVE-2021-44519 | ÉLEVÉE8.8 | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution. | 19/04/2022 |
| CVE-2022-27506 | FAIBLE2.7 | Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI | 13/04/2022 |
| CVE-2022-27503 | MOYENNE6.1 | Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9 | 13/04/2022 |
| CVE-2022-26151 | ÉLEVÉE7.2 | Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection. | 13/04/2022 |