Citrix Command Center vulnerabilities

3 CVEs affecting Citrix Command Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7999, published 2016-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2682, published 2015-03-26. Medium severity, CVSS 5.0. EPSS: 10.7% chance of exploitation in the next 30 days. Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.
CVE-2015-2683, published 2015-03-26. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to…
CVE-2015-7999, published 2016-04-14. High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute…