7.8

CVE-2021-22928

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.

Data is provided by the National Vulnerability Database (NVD)
Citrix ≫ Virtual Apps And Desktops SwEdition- Version >= 2006 <= 2106
Citrix ≫ Virtual Apps And Desktops Version1912 Update- SwEditionltsr
Citrix ≫ Virtual Apps And Desktops Version1912 Updatecu3
Citrix ≫ Xenapp Version7.15 Update- SwEditionltsr
Citrix ≫ Xenapp Version7.15 Updatecu6 SwEditionltsr
Citrix ≫ Xenapp Version7.15 Updatecu7 SwEditionltsr
Citrix ≫ Xendesktop Version7.15 Update- SwEditionltsr
Citrix ≫ Xendesktop Version7.15 Updatecu6 SwEditionltsr
Citrix ≫ Xendesktop Version7.15 Updatecu7 SwEditionltsr
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.129
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C