Vulnerability Description
Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.
CVSS Score
9.8
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Xenapp | 6.0.0.0 |
| Citrix | Xendesktop | <= 7.8 |
Related Weaknesses (CWE)
References
- http://support.citrix.com/article/CTX215460Vendor Advisory
- http://www.securityfocus.com/bid/92316Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036539Third Party AdvisoryVDB Entry
- http://support.citrix.com/article/CTX215460Vendor Advisory
- http://www.securityfocus.com/bid/92316Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036539Third Party AdvisoryVDB Entry
FAQ
What is CVE-2016-6493?
CVE-2016-6493 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.
How severe is CVE-2016-6493?
CVE-2016-6493 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-6493?
Check the references section above for vendor advisories and patch information. Affected products include: Citrix Xenapp, Citrix Xendesktop.