high7.5Known exploited
CVE-2019-13608
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.
Apply updates per vendor instructions.
Impact
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Storefront Server | from 1811 before 1903 before 3.12.4000 before 3.0.8000 |