Citrix ShareFile Storagezones Controller vulnerabilities

8 CVEs affecting Citrix ShareFile Storagezones Controller, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22941, published 2021-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22941: Citrix ShareFile Improper Access Control Vulnerability, published 2021-09-23. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 53.6% chance of exploitation in the next 30 days. Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
CVE-2020-8982, published 2020-05-07. High severity, CVSS 7.5. EPSS: 27.1% chance of exploitation in the next 30 days. An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020. RCE and…
CVE-2020-7473, published 2020-05-07. High severity, CVSS 7.5. EPSS: 14.3% chance of exploitation in the next 30 days. In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to…
CVE-2020-8983, published 2020-05-07. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, which allows remote…
CVE-2018-16969, published 2018-09-26. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message.
CVE-2021-22891, published 2021-05-27. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage…
CVE-2018-16968, published 2018-09-26. Low severity, CVSS 3.1. EPSS: 1.1% chance of exploitation in the next 30 days. Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.
CVE-2021-22932, published 2021-08-16. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously…