Known vulnerabilities in Citrix Virtual Apps and Desktops

Vendor: Citrix
Software: Citrix Virtual Apps and Desktops
Software CPE: cpe:2.3:a:citrix:citrix-virtual-apps-and-desktops:*:*:*:*:*:*:*:*
Website: https://www.citrix.com/
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Citrix Virtual Apps and Desktops Citrix Virtual Apps and Desktops is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112559 - Improper Privilege Management
CVE-2025-6759		 CWE-269 Low
No
No
 2402 LTSR CU1 Update 1, 2402 LTSR CU2 Update 1 09.07.2025 SB2025070905
#VU100449 - Deserialization of Untrusted Data
CVE-2024-8069		 CWE-502 Medium
Available
Exploited
 1912 LTSR CU9 hotfix 19.12.9100.6, 2203 LTSR CU5 hotfix 22.03.5100.11, 2402 LTSR CU1 hotfix 24.02.1200.16, 2407 hotfix 24.5.200.8 13.11.2024 SB2024111349
#VU100448 - Improper Privilege Management
CVE-2024-8068		 CWE-269 Medium
No
Exploited
 1912 LTSR CU9 hotfix 19.12.9100.6, 2203 LTSR CU5 hotfix 22.03.5100.11, 2402 LTSR CU1 hotfix 24.02.1200.16, 2407 hotfix 24.5.200.8 13.11.2024 SB2024111349
#VU94082 - Improper Privilege Management
CVE-2024-6151		 CWE-269 Low
No
No
 1912 LTSR CU9, 2203 LTSR CU5, 2402, 2402 LTSR 10.07.2024 SB2024071064
#VU85518 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-6184		 CWE-913 Low
No
No
 1912 LTSR CU8 hotfix 19.12.8100.4, 2203 LTSR CU4, 2311 17.01.2024 SB2024011730