CVE-2018-14007: Citrix Xenserver

Critical severity, CVSS 9.8. EPSS: 56.1% chance of exploitation in the next 30 days.

Citrix XenServer 7.1 and newer allows Directory Traversal.

Affected products

• Citrix Xenserver: version 7.1 only; version 7.4 only; version 7.5 only

Published 2018-08-15. Last modified 2026-06-17.