← Retour aux CVEs
CVE-2019-13608
HIGHCISA KEV7.5
Description
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
Details CVE
Score CVSS v3.17.5
SeveriteHIGH
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie8/29/2019
Derniere modification11/6/2025
Sourcekev
Observations honeypot0
CISA KEV
FournisseurCitrix
ProduitStoreFront Server
Nom vulnerabiliteCitrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
Date ajout KEV2021-11-03
Date limite remediation2022-05-03
Utilise dans ransomwareKnown
Produits affectes
citrix:storefront_server
Faiblesses (CWE)
CWE-611CWE-611
References
https://support.citrix.com/article/CTX251988(cve@mitre.org)
https://support.citrix.com/article/CTX251988(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13608(134c704f-9b21-4f2e-91b3-4a467353bcc0)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.