CVE-2022-26151

Опубликовано: 13 апр. 2022

Источник: nvd

CVSS3: 7.2

CVSS2: 9

EPSS Низкий

Описание

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.

Ссылки

https://support.citrix.com/article/CTX370551
Vendor Advisory
https://support.citrix.com/search
Vendor Advisory
https://www.chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe
Third Party Advisory
https://support.citrix.com/article/CTX370551
Vendor Advisory
https://support.citrix.com/search
Vendor Advisory
https://www.chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:citrix:xenmobile_server:10.13.0:-:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.13.0:rolling_patch_3:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.13.0:rolling_patch_4:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.13.0:rolling_patch_5:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.13.0:rolling_patch_6:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.13.0:rolling_patch_7:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.14.0:-:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.14.0:rolling_patch_1:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.14.0:rolling_patch_2:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.14.0:rolling_patch_3:*:*:*:*:*:*

cpe:2.3:a:citrix:xenmobile_server:10.14.0:rolling_patch_4:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02459

Низкий

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-77

Связанные уязвимости

GHSA-rgf2-86fc-62hw