Citrix Desktop Server vulnerabilities

4 CVEs affecting Citrix Desktop Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5107, published 2008-11-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0356, published 2008-01-18. High severity, CVSS 10.0. EPSS: 73% chance of exploitation in the next 30 days. Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop…
CVE-2008-2300, published 2008-05-18. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access…
CVE-2008-2299, published 2008-05-18. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use…
CVE-2008-5107, published 2008-11-17. Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days. The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these…