Citrix Presentation Server vulnerabilities

6 vulnerabilities

Known vulnerabilities in Citrix Presentation Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2008-2299citrixaccess_essentials+2
EPSS score
1.07%
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.6.8CVE-2008-4676citrixaccess_essentials+2
EPSS score
0.29%
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain.1.9CVE-2008-5107citrixdesktop_server+1
EPSS score
0.30%
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.4.3CVE-2002-2426citrixaccess_essentials+2
EPSS score
0.66%
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information.7.5CVE-2009-2453citrixpresentation_server+1
EPSS score
1.43%
Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.6.5CVE-2006-3779citrixmetaframe+2
EPSS score
1.32%
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.