CVE-2017-9231 XML external entity in n/a

What is CVE-2017-9231?

CVE-2017-9231 is a high-severity vulnerability in n/a, published on 16 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.

Weakness: CWE-611

Which versions are affected by CVE-2017-9231?

It affects 1 product.

Products include Citrix Xenmobile Server.

How do I fix CVE-2017-9231?

No fix has been published for CVE-2017-9231 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-9231 being exploited?

There is no known exploitation of CVE-2017-9231 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2020-8211 SQL injection in Citrix XenMobile Server Critical 9.8
• CVE-2020-8212 Missing authorization in Citrix XenMobile Server Critical 9.8
• CVE-2018-10648 File upload in n/a Critical 9.8
• CVE-2018-10653 XML external entity in n/a Critical 9.8
• CVE-2018-18571 Auth bypass in n/a Critical 9.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-f7rq-9qg8-cchw.