critical9.8Public exploit code
CVE-2018-10653
There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Citrix XenMobile Server 10.8 - XML External Entity Injection2020-01-22 · webapps · xml
Impact
There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Xenmobile Server | Versions 10.8, 10.7 |