Vulnerabilities (CVE)

Filtered by vendor Citrix Subscribe
Total 467 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0502 1 Citrix 1 Nfuse 2026-06-16 5.0 MEDIUM N/A
Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page.
CVE-2002-0301 1 Citrix 1 Nfuse 2026-06-16 5.0 MEDIUM N/A
Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.
CVE-2001-1192 1 Citrix 1 Ica Client 2026-06-16 7.5 HIGH N/A
Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.
CVE-2001-0908 1 Citrix 1 Metaframe 2026-06-16 7.5 HIGH N/A
CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).
CVE-2001-0760 1 Citrix 1 Nfuse 2026-06-16 5.0 MEDIUM N/A
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
CVE-2001-0716 1 Citrix 1 Metaframe 2026-06-16 5.0 MEDIUM N/A
Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (crash) via a large number of incomplete connections to the server.
CVE-2000-0244 1 Citrix 2 Metaframe, Winframe 2026-06-16 10.0 HIGH N/A
The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.