Xencenterweb vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

XE

Product

Xencenterweb

by Citrix · last CVE Oct 22, 2009

4

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 0High 1Medium 0Low 0

Severity

All severities4 Critical0 High1 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Xencenterweb to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2009-3759	8.8	2%	Oct 22	Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication… Affected: All versions, or not specified
CVE-2009-3760	–	3%	Oct 22	Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to inject arbitrary… Affected: All versions, or not specified
CVE-2009-3758	–	1%	Oct 22	SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the… Affected: All versions, or not specified
CVE-2009-3757	–	2%	Oct 22	Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to inject arbitrary web script or… Affected: All versions, or not specified