CVE-2016-6493 Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.

CriticalCVSS 9.8 EPSS 2.2%

Published: 2016-08-20 00:00
Updated: 2026-06-17 03:51
Exploit status: No public exploit known

Description

Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.

Affected products

Product	Affected versions	Fixed in
citrix xenapp	= 6.0.0.0	No fix listed
citrix xenapp	= 6.5.0.0	No fix listed
citrix xenapp	= 7.0.0.0	No fix listed
citrix xenapp	= 7.1.0.0	No fix listed
citrix xenapp	= 7.5.0.0	No fix listed
citrix xenapp	= 7.6.0.0	No fix listed
citrix xenapp	= 7.7.0.0	No fix listed
citrix xenapp	= 7.8.0.0	No fix listed
citrix xendesktop	<= 7.8	No fix listed

References

support.citrix.com vendor-advisory
92316 third-party-advisory vdb-entry
1036539 third-party-advisory vdb-entry

CVSS v3.0

9.8 Critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (2)

v3.0 9.8 · nvd@nist.gov
v2.0 7.5 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.19% (percentile 82.7)
CWE: CWE-254

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.