CVE-2017-9231
Published Jun 16, 2017
Last updated 7 years ago
Overview
- Description
- XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-611
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:citrix:xenmobile_server:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA111D25-3870-427B-B9DF-545CB07CF0E7"
},
{
"criteria": "cpe:2.3:o:citrix:xenmobile_server:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B66150E7-E4C3-4895-B806-FCE001EE0739"
},
{
"criteria": "cpe:2.3:o:citrix:xenmobile_server:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "178F3810-071A-40FF-A22A-D6DB0C53931F"
},
{
"criteria": "cpe:2.3:o:citrix:xenmobile_server:10.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFF8A1F0-372E-4A4A-889A-1AF5F287ECC3"
},
{
"criteria": "cpe:2.3:o:citrix:xenmobile_server:10.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FE08E27-1B91-4187-8F7E-17DE03C94612"
},
{
"criteria": "cpe:2.3:o:citrix:xenmobile_server:10.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0D2A8B0-6BD3-48FB-AC71-D087D099C458"
},
{
"criteria": "cpe:2.3:o:citrix:xenmobile_server:10.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "837A66B0-F1DB-4E95-880C-8A7533B0574A"
},
{
"criteria": "cpe:2.3:o:citrix:xenmobile_server:10.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ED27536-FB52-4D4A-925C-715511536E6B"
}
],
"operator": "OR"
}
]
}
]