XS
Product
Xenmobile Server
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 6Low 0
Watch
Add Xenmobile Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44519 | 8.8 | Apr 19 | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution Affected: 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.14.0; +3 more |
| CVE-2021-44520 | 8.8 | Apr 13 | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges Affected: 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.14.0; +3 more |
| CVE-2018-10654 | 8.1 | May 23 | There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3 Affected: 10.8; 10.8; 10.7; 10.7; 10.7 |
| CVE-2018-18013 | 7.8 | Oct 24 | * Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input Affected: through 10.8.0 |
| CVE-2018-10650 | 7.8 | May 23 | There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3 Affected: 10.8; 10.8; 10.7; 10.7; 10.7 |
| CVE-2020-8253 | 7.5 | Sep 18 | Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server… Affected: through 10.8.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; +12 more |
| CVE-2020-8210 | 7.5 | Aug 17 | Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile… Affected: through 10.8.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; +15 more |
| CVE-2020-8209 | 7.5 | Aug 17 | Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server… Affected: through 10.8.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; 10.9.0; +12 more |
| CVE-2018-10652 | 7.5 | May 23 | There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3 Affected: 10.7; 10.7; 10.7 |
| CVE-2017-9231 | 7.5 | Jun 16 | XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors Affected: 9.0; 10.0; 10.1; 10.3; 10.3.5; 10.3.6; +2 more |
| CVE-2022-26151 | 7.2 | Apr 13 | Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection Affected: 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; +5 more |
Showing 11
