Citrix

Access Gateway

13 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2011-2882

  • EPSS 75.02%
  • Published 21.07.2011 23:55:04
  • Last modified 11.04.2025 00:51:21

Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via craf...

9.3

CVE-2011-2883

  • EPSS 0.37%
  • Published 21.07.2011 23:55:04
  • Last modified 11.04.2025 00:51:21

The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, ...

9.3

CVE-2010-4566

  • EPSS 71.85%
  • Published 14.01.2011 23:00:47
  • Last modified 11.04.2025 00:51:21

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows...

10

CVE-2008-2528

  • EPSS 1.33%
  • Published 03.06.2008 15:32:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain "access to network resources" via unspecified vectors.

5

CVE-2007-0011

  • EPSS 1.1%
  • Published 05.11.2007 17:46:00
  • Last modified 09.04.2025 00:30:58

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", incl...

9.3

CVE-2007-4013

  • EPSS 1.17%
  • Published 26.07.2007 01:30:00
  • Last modified 09.04.2025 00:30:58

Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (aka CCAOControl Object) before...

6.8

CVE-2007-4016

  • EPSS 0.93%
  • Published 26.07.2007 01:30:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors.

7.6

CVE-2007-4017

  • EPSS 2.74%
  • Published 26.07.2007 01:30:00
  • Last modified 09.04.2025 00:30:58

Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators.

6.8

CVE-2007-4018

  • EPSS 0.77%
  • Published 26.07.2007 01:30:00
  • Last modified 09.04.2025 00:30:58

Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.

4.3

CVE-2007-3679

  • EPSS 1.06%
  • Published 25.07.2007 17:30:00
  • Last modified 09.04.2025 00:30:58

The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download a...