XS
Product
Xenmobile Server
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 6Low 0
Watch
Add Xenmobile Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8212 | 9.8 | Aug 17 | Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before… Affected: through 10.9.0; 10.10.0; 10.10.0; 10.10.0; 10.10.0; 10.10.0; +10 more |
| CVE-2020-8211 | 9.8 | Aug 17 | Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server… Affected: through 10.8.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; +15 more |
| CVE-2018-10653 | 9.8 | May 23 | There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3 Affected: 10.8; 10.8; 10.7; 10.7; 10.7 |
| CVE-2018-10648 | 9.8 | May 23 | There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3 Affected: 10.8; 10.8; 10.7; 10.7; 10.7 |
| CVE-2018-18571 | 9.1 | Jun 5 | An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3 Affected: 10.8.0; 10.8.0; 10.8.0; 10.8.0; 10.8.0; 10.8.0; +3 more |
| CVE-2021-44519 | 8.8 | Apr 19 | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution Affected: 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.14.0; +3 more |
| CVE-2021-44520 | 8.8 | Apr 13 | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges Affected: 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.14.0; +3 more |
| CVE-2018-10654 | 8.1 | May 23 | There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3 Affected: 10.8; 10.8; 10.7; 10.7; 10.7 |
| CVE-2018-18013 | 7.8 | Oct 24 | * Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input Affected: through 10.8.0 |
| CVE-2018-10650 | 7.8 | May 23 | There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3 Affected: 10.8; 10.8; 10.7; 10.7; 10.7 |
| CVE-2020-8253 | 7.5 | Sep 18 | Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server… Affected: through 10.8.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; +12 more |
| CVE-2020-8210 | 7.5 | Aug 17 | Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile… Affected: through 10.8.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; +15 more |
| CVE-2020-8209 | 7.5 | Aug 17 | Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server… Affected: through 10.8.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; +12 more |
| CVE-2018-10652 | 7.5 | May 23 | There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3 Affected: 10.7; 10.7; 10.7 |
| CVE-2017-9231 | 7.5 | Jun 16 | XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors Affected: 9.0; 10.0; 10.1; 10.3; 10.3.5; 10.3.6; +2 more |
| CVE-2022-26151 | 7.2 | Apr 13 | Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection Affected: 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; +5 more |
| CVE-2020-8208 | 6.1 | Aug 17 | Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile… Affected: through 10.8.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; +12 more |
| CVE-2018-10651 | 6.1 | May 23 | There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3 Affected: 10.8; 10.8; 10.7; 10.7; 10.7 |
| CVE-2018-10649 | 6.1 | May 23 | There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3 Affected: 10.7; 10.7; 10.7 |
| CVE-2016-2789 | 6.1 | Apr 7 | Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote… Affected: 10.0; 10.1; 10.3 |
| CVE-2016-6877 | 5.3 | May 5 | Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page Affected: through 10.3.6.310 |
| CVE-2018-18014 | 4.8 | Oct 24 | * Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on… Affected: through 10.8.0 |
Showing 22