← Back to CVEs
CVE-2019-13608
HIGHCISA KEV7.5
Description
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
CVE Details
CVSS v3.1 Score7.5
SeverityHIGH
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published8/29/2019
Last Modified11/6/2025
Sourcekev
Honeypot Sightings0
CISA KEV
VendorCitrix
ProductStoreFront Server
Vulnerability NameCitrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
KEV Date Added2021-11-03
Remediation Due Date2022-05-03
Ransomware UseKnown
Affected Products
citrix:storefront_server
Weaknesses (CWE)
CWE-611CWE-611
References
https://support.citrix.com/article/CTX251988(cve@mitre.org)
https://support.citrix.com/article/CTX251988(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13608(134c704f-9b21-4f2e-91b3-4a467353bcc0)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.