Citrix XenDesktop is a desktop virtualization software that allows multiple users to access and run Microsoft Windows desktops that are installed at a centralized location separate from the devices from which they are being accessed. It provides secure remote access to Windows and Linux desktops and applications from any device.

Citrix XenDesktop

Citrix XenApp is a software solution that allows Windows applications to be accessed via individual devices from a shared server or cloud system. It provides secure, remote access to Windows apps and data from any device. XenApp removes the need for individual installations on each device, streamlining management and reducing IT costs.

Citrix XenApp

Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1), and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Controller via unspecified vectors.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2016-6493	CRITICAL	9.8	Citrix XenDesktop	cpe:2.3:a:citrix:xendesktop	No	Yes	Aug 19, 2016
CVE-2020-8283	HIGH	8.8	Citrix Virtual Delivery Agent (VDA)	cpe:2.3:a:citrix:virtual_apps_and_desktops	No	Yes	Dec 14, 2020
CVE-2020-8269	HIGH	8.8	Citrix Virtual Delivery Agent (VDA)	cpe:2.3:a:citrix:virtual_apps_and_desktops	No	Yes	Nov 16, 2020
CVE-2021-22928	HIGH	7.8	Citrix Virtual Delivery Agent (VDA)	cpe:2.3:a:citrix:virtual_apps_and_desktops	No	Yes	Aug 05, 2021
CVE-2016-4810	HIGH	7.5	Citrix XenDesktop	cpe:2.3:a:citrix:xenapp	No	Yes	Jun 01, 2016

CVE-2016-4810:
Citrix XenDesktop vulnerability analysis and mitigation

7.5

Related Citrix XenDesktop vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2016-4810: Citrix XenDesktop vulnerability analysis and mitigation