Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS
Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting
Users with only access to launch VDA applications can launch an unauthorized desktop