Citrix Cloudplatform vulnerabilities

4 CVEs affecting Citrix Cloudplatform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2758, published 2014-05-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2758, published 2014-05-23. Medium severity, CVSS 5.0. EPSS: 6.5% chance of exploitation in the next 30 days. Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C uses a hash of a predictable sequence, which makes it easier for remote attackers…
CVE-2013-2756, published 2014-05-23. Medium severity, CVSS 5.0. EPSS: 5.8% chance of exploitation in the next 30 days. Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy authentication by leveraging…
CVE-2013-2757, published 2014-05-23. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have…
CVE-2012-5616, published 2013-01-22. Low severity, CVSS 1.5. EPSS: 0.6% chance of exploitation in the next 30 days. Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain (1)…