CVE-2020-8209
high · 7.5A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files.
7.5
CVSS
48.7%
EPSS (exploit prob.)
99th
EPSS percentile
2020-08-17
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| citrix | xenmobile_server | <= 10.8.0 |
| citrix | xenmobile_server | 10.9.0 |
| citrix | xenmobile_server | 10.9.0 |
| citrix | xenmobile_server | 10.9.0 |
| citrix | xenmobile_server | 10.9.0 |
| citrix | xenmobile_server | 10.9.0 |
| citrix | xenmobile_server | 10.10.0 |
| citrix | xenmobile_server | 10.10.0 |
| citrix | xenmobile_server | 10.10.0 |
| citrix | xenmobile_server | 10.10.0 |
| citrix | xenmobile_server | 10.10.0 |
| citrix | xenmobile_server | 10.10.0 |
| citrix | xenmobile_server | 10.11.0 |
| citrix | xenmobile_server | 10.11.0 |
| citrix | xenmobile_server | 10.11.0 |
| citrix | xenmobile_server | 10.11.0 |
| citrix | xenmobile_server | 10.12.0 |
| citrix | xenmobile_server | 10.12.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2020-8209