Where
-Infinity
0
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.

First published (updated )
Severity
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.

First published (updated )
Severity
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.

First published (updated )
Severity
9
OS Command Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342

First published (updated )
Severity
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9

First published (updated )
Severity
8.5
EPSS
0.04%
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS

First published (updated )
Severity
7.8
EPSS
0.02%
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS

First published (updated )
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.

First published (updated )
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.

First published (updated )
Severity
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1), and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Controller via unspecified vectors.

First published (updated )
Severity
7.2
XSS
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

First published (updated )
Severity
6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors.

First published (updated )
Severity
6.3
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Users with only access to launch VDA applications can launch an unauthorized desktop

First published (updated )
Severity
5.8
AV:N/AC:M/Au:N/C:P/I:P/A:N

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:N/I:P/A:N

Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device.

First published (updated )
Severity
5
AV:N/AC:L/Au:N/C:P/I:N/A:N

Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.

First published (updated )
Severity
4.9
AV:A/AC:M/Au:S/C:P/I:P/A:P

Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.

First published (updated )
Severity
1.9
Infoleak
AV:L/AC:M/Au:N/C:P/I:N/A:N

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.

First published (updated )
EOL
Apr 15, 2029
Support Ends
Apr 15, 2029

End of life: 4/15/2029, End of support: 4/15/2029, Latest version: 2402 CU4 Update 1

First published (updated )
EOL
Apr 15, 2029
Support Ends
Apr 15, 2029

End of life: 4/15/2029, End of support: 4/15/2029, Latest version: 2402 CU4 Update 1

First published (updated )
EOL
Jun 20, 2025
Support Ends
Apr 20, 2024

End of life: 6/20/2025, End of support: 4/20/2024, Latest version: 2311

First published (updated )
EOL
Jun 20, 2025
Support Ends
Apr 20, 2024

End of life: 6/20/2025, End of support: 4/20/2024, Latest version: 2311

First published (updated )
EOL
Mar 23, 2027
Support Ends
Mar 23, 2027

End of life: 3/23/2027, End of support: 3/23/2027, Latest version: 2203 CU7 Update 4

First published (updated )
EOL
Mar 23, 2027
Support Ends
Mar 23, 2027

End of life: 3/23/2027, End of support: 3/23/2027, Latest version: 2203 CU7 Update 4

First published (updated )
EOL
Mar 29, 2022
Support Ends
Mar 29, 2021

End of life: 3/29/2022, End of support: 3/29/2021, Latest version: 2009

First published (updated )
EOL
Mar 29, 2022
Support Ends
Mar 29, 2021

End of life: 3/29/2022, End of support: 3/29/2021, Latest version: 2009

First published (updated )
EOL
Dec 17, 2021
Support Ends
Dec 17, 2020

End of life: 12/17/2021, End of support: 12/17/2020, Latest version: 2006

First published (updated )
EOL
Dec 17, 2021
Support Ends
Dec 17, 2020

End of life: 12/17/2021, End of support: 12/17/2020, Latest version: 2006

First published (updated )
EOL
Dec 18, 2024
Support Ends
Dec 18, 2024

End of life: 12/18/2024, End of support: 12/18/2024, Latest version: 1912 CU10

First published (updated )
EOL
Dec 18, 2024
Support Ends
Dec 18, 2024

End of life: 12/18/2024, End of support: 12/18/2024, Latest version: 1912 CU10

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203