Citrix Vdi-In-A-Box vulnerabilities

2 CVEs affecting Citrix Vdi-In-A-Box, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3780, published 2014-05-30.

More from Citrix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3780, published 2014-05-30. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to bypass authentication via unspecified vectors, related to a Java servlet.
• CVE-2014-2690, published 2014-04-15. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log.