CVEvulnerability
CVE-2020-8208
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-08-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting (XSS).
Affected configurations
• citrix xenmobile server (<= 10.8.0)
• citrix xenmobile server 10.9.0
• citrix xenmobile server 10.10.0
• citrix xenmobile server 10.11.0
• citrix xenmobile server 10.12.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://support.citrix.com/article/CTX277457 Vendor Advisory
- https://support.citrix.com/article/CTX277457 Vendor Advisory