CVE-2019-13608

EUVD-2019-5046
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
citrixstorefront_server
1811 ≤
𝑥
< 1903
citrixstorefront_server
𝑥
< 3.12.4000
citrixstorefront_server
𝑥
< 3.0.8000
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.citrix.com/article/CTX251988
https://support.citrix.com/article/CTX251988
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13608