CVE-2015-2682: Citrix Command Center

Medium severity, CVSS 5.0. EPSS: 10.7% chance of exploitation in the next 30 days.

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.

Affected products

• Citrix Command Center: version 5.1 only; version 5.2 only

Published 2015-03-26. Last modified 2026-06-17.