← Back

Citrix

citrix

403 CVEs • 153 products

Products (153)

Click to collapse
Toggle
Xenserver
xenserver
Gateway
gateway
Sd Wan
sd-wan
Workspace
workspace
Metaframe
metaframe
Netscaler
netscaler
Sd Wan Wanop
sd-wan_wanop
Xen
xen
Xenapp
xenapp
Xendesktop
xendesktop
Nfuse
nfuse
Web Interface
web_interface
Xencenterweb
xencenterweb
Cloudplatform
cloudplatform
Vdi In A Box
vdi-in-a-box
Netscaler Sdx
netscaler_sdx
Sharefile
sharefile
Receiver
receiver
Workspace App
workspace_app
Secure Mail
secure_mail
Winframe
winframe
Ica Client
ica_client
Xp
xp
Secure Gateway
secure_gateway
Licensing
licensing
Cloudstack
cloudstack
Xenclient Xt
xenclient_xt
Gotomeeting
gotomeeting

CVEs (403)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Citrix
1Sharefile Storage Zones Controller
Jun 17, 2026
Jul 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zo...Show more
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.Show less
1Citrix
2Application Delivery Controller
Gateway
Jun 17, 2026
Jul 10, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting
1Citrix
2Application Delivery Controller
Gateway
Jun 17, 2026
Jul 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Arbitrary file read in Citrix ADC and Citrix Gateway 
1Citrix
1Workspace
Jun 17, 2026
Jul 10, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who...Show more
A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched.Show less
1Citrix
1Workspace
Jun 17, 2026
Feb 16, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.
1Citrix
1Workspace
Jun 17, 2026
Feb 16, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A malicious user can cause log files to be written to a directory that they do not have permission to write to.
1Citrix
1Virtual Apps And Desktops
Jun 17, 2026
Feb 16, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.
1Citrix
2Application Delivery Controller
Gateway
Jun 17, 2026
Jan 26, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated denial of service
1Citrix
2Application Delivery Controller
Gateway
Jun 17, 2026
Jan 26, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Authenticated denial of service
1Citrix
2Application Delivery Controller Firmware
Gateway
Jun 17, 2026
Dec 26, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before...Show more
In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.Show less
1Citrix
2Application Delivery Controller Firmware
Gateway Firmware
Jun 17, 2026
Dec 13, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Unauthenticated remote arbitrary code execution
1Citrix
2Application Delivery Controller Firmware
Gateway
Jun 17, 2026
Nov 8, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
User login brute force protection functionality bypass
1Citrix
2Application Delivery Controller Firmware
Gateway
Jun 17, 2026
Nov 8, 2022
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Remote desktop takeover via phishing
1Citrix
2Application Delivery Controller Firmware
Gateway
Jun 17, 2026
Nov 8, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Unauthorized access to Gateway user capabilities
1Citrix
2Application Delivery Controller Firmware
Gateway
Jun 17, 2026
Jul 28, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Unauthenticated redirection to a malicious website
1Citrix
1Application Delivery Management
Jun 17, 2026
Jun 16, 2022
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM.
1Citrix
1Application Delivery Management
Jun 17, 2026
Jun 16, 2022
N/A· v4
8.1 HIGH· v3
7.8 HIGH· v2
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the defau...Show more
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.Show less
1Citrix
1Gateway Plug In
Jun 17, 2026
May 26, 2022
N/A· v4
7.1 HIGH· v3
6.6 MEDIUM· v2
An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citri...Show more
An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM.Show less
1Citrix
1Xenmobile Server
Jun 17, 2026
Apr 19, 2022
N/A· v4
8.8 HIGH· v3
6.0 MEDIUM· v2
In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution.
1Citrix
14Sd Wan 1000 Firmware
Sd Wan 1100 FirmwareSd Wan 110 Firmware+11 more
Jun 17, 2026
Apr 13, 2022
N/A· v4
2.7 LOW· v3
6.8 MEDIUM· v2
Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI