Citrix Virtual Apps And Desktops vulnerabilities
9 vulnerabilities
Known vulnerabilities in Citrix Virtual Apps And Desktops, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-22928citrixvirtual_apps_and_desktops+2
EPSS score0.25%
A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.CVE-2025-6759citrixvirtual_apps_and_desktops+1EPSS score0.25%
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaSCVE-2020-8283citrixvirtual_apps_and_desktops+2EPSS score2.68%
An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.CVE-2020-8269citrixvirtual_apps_and_desktops+2EPSS score2.68%
An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9CVE-2020-8270citrixvirtual_apps_and_desktopsEPSS score3.48%
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342CVE-2024-6151citrixvirtual_apps_and_desktops+1EPSS score0.21%
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaSCVE-2023-24490citrixlinux_virtual_delivery_agent+3EPSS score0.30%
Users with only access to launch VDA applications can launch an unauthorized desktopCVE-2023-24483citrixcitrix virtual apps and desktops+1EPSS score0.27%
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.CVE-2023-6184citrixvirtual_apps_and_desktops+1EPSS score46.61%
Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting