9.8crit
CVE-2016-6493
Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified secur…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.2%
percentile 83%
Public exploits
0
none known
Summary
Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.
Exploit prediction (EPSS)
2.19% probability of exploitation in the next 30 days, higher than 83% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-254 7PK - Security Features
References
- securitytracker.com /id/1036539 · vdb-entry, x_refsource_SECTRACK, x_transferred
- securityfocus.com /bid/92316 · vdb-entry, x_refsource_BID, x_transferred
- support.citrix.com /article/CTX215460 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-6493
- NVD: CVE-2016-6493
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.