CVE-2007-3679: citrix access_gateway

EPSS trend

Probability

1.68%

Chance of exploitation in the next 30 days

Percentile

77%

Versus all other CVEs

30-day change

0.00 pp

From 1.68% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

11 links

osvdb.org/37845VDB EntryX Refsource OSVDB
www.vupen.com/english/advisories/2007/2583VDB EntryX Refsource VUPEN
securityreason.com/securityalert/2916Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/26143Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/24975VDB EntryX Refsource BIDPatch
www.securityfocus.com/archive/1/474204/100/0/threadedMailing ListX Refsource BUGTRAQ
www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-006.txtX Refsource MISC
support.citrix.com/article/CTX113815X Refsource CONFIRMPatch
support.citrix.com/article/CTX114028X Refsource CONFIRMPatch
www.securityfocus.com/bid/24865VDB EntryX Refsource BID

Show all 11 references

exchange.xforce.ibmcloud.com/vulnerabilities/35511VDB EntryX Refsource XF

Related vulnerabilities

CVE-2013-2263citrixaccess_gateway1.39%13y ago19-03-2013 14:00Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors.CVE-2007-0011citrixaccess_gateway2.12%18y ago05-11-2007 17:00The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache.CVE-2007-4016citrixaccess_gateway2.21%19y ago26-07-2007 01:00Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors.CVE-2007-4013chainguardfirefox+24.23%19y ago26-07-2007 01:00Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (aka CCAOControl Object) before 4.5.0.0 in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 have unknown impact and attack vectors, possibly related to buffer overflows. NOTE: vector 3 might overlap CVE-2007-3679.CVE-2007-4017citrixaccess_gateway2.49%19y ago26-07-2007 01:00Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators.CVE-2007-4018citrixaccess_gateway1.31%19y ago26-07-2007 01:00Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.

All vulnerabilities inaccess_gateway

CVE-2007-3679: citrix access_gateway

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References