← Back

Xenmobile Server

xenmobile_server

Vendor: Citrix • 22 CVEs

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-44519
1Citrix
1Xenmobile Server
Nov 21, 2024
Apr 19, 2022
N/A· v4
8.8 HIGH· v3
6.0 MEDIUM· v2
In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution.
CVE-2022-26151
1Citrix
1Xenmobile Server
Nov 21, 2024
Apr 13, 2022
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.
CVE-2021-44520
1Citrix
1Xenmobile Server
Nov 21, 2024
Apr 13, 2022
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.
CVE-2020-8253
1Citrix
1Xenmobile Server
Nov 21, 2024
Sep 18, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 leads to the ability to...Show more
Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 leads to the ability to access sensitive files.Show less
CVE-2020-8212
1Citrix
1Xenmobile Server
Nov 21, 2024
Aug 17, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged fun...Show more
Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality.Show less
CVE-2020-8211
1Citrix
1Xenmobile Server
Nov 21, 2024
Aug 17, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection.
CVE-2020-8210
1Citrix
1Xenmobile Server
Nov 21, 2024
Aug 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credential...Show more
Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credentials of a service account.Show less
CVE-2020-8209
1Citrix
1Xenmobile Server
Nov 21, 2024
Aug 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability...Show more
Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files.Show less
CVE-2020-8208
1Citrix
1Xenmobile Server
Nov 21, 2024
Aug 17, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scri...Show more
Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting (XSS).Show less
CVE-2018-18571
1Citrix
1Xenmobile Server
Nov 21, 2024
Jun 5, 2019
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobi...Show more
An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management (MAM) enrolled device.Show less
CVE-2018-18014
1Citrix
1Xenmobile Server
Nov 21, 2024
Oct 24, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001. NOTE: the...Show more
* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.Show less
CVE-2018-18013
1Citrix
1Xenmobile Server
Nov 21, 2024
Oct 24, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into J...Show more
* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into Java objects in memory, giving rise to a remote code execution vulnerability. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.Show less
CVE-2018-10654
1Citrix
1Xenmobile Server
Nov 21, 2024
May 23, 2018
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
CVE-2018-10653
1Citrix
1Xenmobile Server
Nov 21, 2024
May 23, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
CVE-2018-10652
1Citrix
1Xenmobile Server
Nov 21, 2024
May 23, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3.
CVE-2018-10651
1Citrix
1Xenmobile Server
Nov 21, 2024
May 23, 2018
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
CVE-2018-10650
1Citrix
1Xenmobile Server
Nov 21, 2024
May 23, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
CVE-2018-10649
1Citrix
1Xenmobile Server
Nov 21, 2024
May 23, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3.
CVE-2018-10648
1Citrix
1Xenmobile Server
Nov 21, 2024
May 23, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
CVE-2017-9231
1Citrix
1Xenmobile Server
May 13, 2026
Jun 16, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.