Cybersecurity Alerts

Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability

Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-611

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-13608