Citrix vulnerabilities
408 vulnerabilities
Known vulnerabilities in Citrix products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 150 products.
Products
50 of 150- Netscaler Gateway73 vulnerabilities
- Netscaler Application Delivery Controller64 vulnerabilities
- Xenserver50 vulnerabilities
- Application Delivery Controller34 vulnerabilities
- Gateway33 vulnerabilities
- Xenmobile Server22 vulnerabilities
- Netscaler Sd Wan18 vulnerabilities
- Sd Wan18 vulnerabilities
- Access Gateway14 vulnerabilities
- Workspace14 vulnerabilities
- Netscaler12 vulnerabilities
- Metaframe10 vulnerabilities
- Sd Wan Wanop10 vulnerabilities
- Metaframe Presentation Server9 vulnerabilities
- Virtual Apps And Desktops9 vulnerabilities
- Xen9 vulnerabilities
- Xenapp9 vulnerabilities
- Cloudportal Services Manager8 vulnerabilities
- Sharefile Storagezones Controller8 vulnerabilities
- Xendesktop8 vulnerabilities
- Netscaler Access Gateway7 vulnerabilities
- Access Essentials6 vulnerabilities
- Citrix Workspace App For Windows6 vulnerabilities
- Netscaler Sdx6 vulnerabilities
- Nfuse6 vulnerabilities
- Presentation Server6 vulnerabilities
- Provisioning Services6 vulnerabilities
- Secure Access Client6 vulnerabilities
- Application Delivery Management5 vulnerabilities
- Citrix Gateway, Citrix ADC4 vulnerabilities
- Cloudplatform4 vulnerabilities
- Desktop Server4 vulnerabilities
- Netscaler ADC4 vulnerabilities
- Netscaler Console4 vulnerabilities
- Web Interface4 vulnerabilities
- Citrix Sd Wan Center3 vulnerabilities
- Command Center3 vulnerabilities
- Gateway Plug In3 vulnerabilities
- Netscaler Sd Wan Center3 vulnerabilities
- Netscaler Service Delivery Appliance Service Vm3 vulnerabilities
- Presentation Server Client3 vulnerabilities
- Sd Wan 10003 vulnerabilities
- Sd Wan 1103 vulnerabilities
- Sd Wan 11003 vulnerabilities
- Sd Wan 20003 vulnerabilities
- Sd Wan 2103 vulnerabilities
- Sd Wan 21003 vulnerabilities
- Sd Wan 4003 vulnerabilities
- Sd Wan 40003 vulnerabilities
- Sd Wan 4103 vulnerabilities
CVE-2026-53562citrixuniconos
EPSS score0.15%
Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.
This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.CVE-2026-84419citrixworkspace app for windowsEPSS score0.11%
Out-of-bounds write vulnerability in Citrix Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.CVE-2026-53564citrixuniconosEPSS score0.34%
Vulnerability in Citrix UniconOS leading to Arbitrary file read and write
This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.CVE-2026-53563citrixuniconosEPSS score0.21%
Vulnerability in Citrix UniconOS leading to Persistent Command Execution
This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.CVE-2018-16969citrixsharefile_storagezones_controllerEPSS score1.10%
Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message.CVE-2018-16968citrixsharefile_storagezones_controllerEPSS score1.06%
Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.CVE-2018-19965alpinexen+5EPSS score0.43%
An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation.CVE-2018-19962alpinexen+5EPSS score0.41%
An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.CVE-2018-19961alpinexen+5EPSS score0.41%
An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.CVE-2018-14007citrixxenserverEPSS score56.15%
Citrix XenServer 7.1 and newer allows Directory Traversal.CVE-2018-17447citrixnetscaler_sd-wan+1EPSS score1.95%
An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.CVE-2018-17446citrixnetscaler_sd-wan+1EPSS score1.96%
A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.CVE-2018-17445citrixnetscaler_sd-wan+1EPSS score11.06%
A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.CVE-2018-17448citrixnetscaler_sd-wan+1EPSS score2.20%
An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.CVE-2018-17444citrixnetscaler_sd-wan+1EPSS score3.58%
A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.CVE-2018-7218citrixapplication_delivery_controller+1EPSS score6.16%
The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors.CVE-2018-18571citrixxenmobile_serverEPSS score2.59%
An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management (MAM) enrolled device.CVE-2018-18014citrixxenmobile_serverEPSS score0.48%
* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.CVE-2018-18013citrixxenmobile_serverEPSS score2.92%
* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into Java objects in memory, giving rise to a remote code execution vulnerability. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.CVE-2018-18517citrixnetscaler_gatewayEPSS score0.83%
Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS.