CVEvulnerability

CVE-2020-8211

9.8 CRITICAL Published 2020-08-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-77, CWE-89

Description

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection.

Affected configurations

• citrix xenmobile server (<= 10.8.0) • citrix xenmobile server 10.9.0 • citrix xenmobile server 10.10.0 • citrix xenmobile server 10.11.0 • citrix xenmobile server 10.12.0

Related

Weakness · CWE (2)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness
  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References