Description
Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 3 May 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.