CVEブラウザに戻る

CVE-2018-14007

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1930%

EPSS Percentile21.92th

Published2018年8月15日

Last Modified2024年11月21日

Vulnerability Description

Citrix XenServer 7.1 and newer allows Directory Traversal.

Affected Platforms (CPE)

📦

Citrix

Xenserver

= 7.1

📦

Citrix

Xenserver

= 7.4

📦

Citrix

Xenserver

= 7.5

References & Advisories

🔗 http://www.securityfocus.com/bid/105110

🔗 http://xenbits.xen.org/xsa/advisory-271.html

🔗 https://support.citrix.com/article/CTX236548

🔗 http://www.securityfocus.com/bid/105110

🔗 http://xenbits.xen.org/xsa/advisory-271.html

🔗 https://support.citrix.com/article/CTX236548

関連する脆弱性情報

CVE-2014-494710.0

Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and ...

CVE-2016-53029.8

Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attac...

CVE-2013-67959.3

The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary c...

CVE-2009-37598.8

Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb all...