Vulnerabilidades em Citrix
38 resultadosCVE-2023-4966CRITICALUnauthenticated sensitive information disclosureEPSS 100.0%KEVCVE-2023-3519CRITICALUnauthenticated remote code executionEPSS 99.4%KEVCVE-2023-24489CRITICALA vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthentEPSS 95.1%KEVCVE-2023-24488MEDIUMCross site scriptingEPSS 80.9%CVE-2022-27511—Corruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator passwordEPSS 12.0%CVE-2022-27518CRITICALUnauthenticated remote arbitrary code executionEPSS 6.9%KEVCVE-2023-3466HIGHReflected Cross-Site Scripting (XSS)
EPSS 3.0%CVE-2023-3467HIGHPrivilege Escalation to root administrator (nsroot)
EPSS 2.1%CVE-2024-8068MEDIUMPrivilege escalation to NetworkService Account accessEPSS 1.4%KEVCVE-2022-27510CRITICALUnauthorized access to Gateway user capabilities EPSS 1.2%CVE-2023-24487MEDIUMArbitrary file readEPSS 1.1%CVE-2022-27512—Temporary disruption of the ADM license serviceEPSS 0.9%CVE-2023-24492CRITICAL
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely EPSS 0.8%CVE-2022-27516MEDIUMUser login brute force protection functionality bypass EPSS 0.6%CVE-2022-27503—Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9EPSS 0.5%CVE-2024-6148MEDIUMBypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5EPSS 0.4%CVE-2024-6286HIGHLocal Privilege escalation allows a low-privileged user to gain SYSTEM privilegesEPSS 0.4%CVE-2024-2049MEDIUMServer-Side Request Forgery (SSRF)EPSS 0.4%CVE-2023-24490MEDIUMUsers with only access to launch VDA applications can launch an unauthorized desktopEPSS 0.3%CVE-2022-27513HIGHRemote desktop takeover via phishingEPSS 0.3%