CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-08-29
Citrix StoreFront XML External Entity (XXE) Injection Vulnerability (CVE-2019-13608) Security Advisory
[Affected Scope] Citrix StoreFront versions before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000)
[Impact] Unauthenticated remote attackers can exploit this vulnerability to read arbitrary local files, perform internal port scanning, or execute Server-Side Request Forgery (SSRF) attacks
[Mitigation] Immediately upgrade Citrix StoreFront to patched versions (1903 or later, 7.15 LTSR CU4 or later, 7.6 LTSR CU8 or later)