CVE-2019-13608: Citrix StoreFront Server XML External Entity (XXE)
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability. Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.
- CISA KEV-listed (remediation due 2022-05-03)
- used in ransomware campaigns
- EPSS 71.7% (98.8% percentile)