CVE-2025-4879

< 2409

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

7.8HIGH

CVE-2023-42404

all versions

OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution.

4.9MEDIUM

CVE-2024-7890

< 2405

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

7.3HIGH

CVE-2024-7889

< 2405

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

7.3HIGH

CVE-2024-42423

all versions

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is

6.1MEDIUM

CVE-2024-6286

< 2403.1

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

7.8HIGH

CVE-2024-6149

< 2404.1

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5

6.1MEDIUM

CVE-2024-6148

< 2404.1

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5

8.8HIGH

CVE-2024-2241

< 2024.1.1.0

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perfor

6.3MEDIUM

CVE-2023-6588

<= 2023.3.2.0

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.

6.5MEDIUM

CVE-2023-24486

< 2302

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user bei

5.5MEDIUM

CVE-2023-2257

< 2023.1.1.4

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS all

7.8HIGH

CVE-2023-24485

< 2212

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the comp

7.8HIGH

CVE-2023-24484

< 2212

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

5.5MEDIUM

CVE-2022-47412

<= 12.1.0.1760

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type I

5.4MEDIUM

CVE-2022-21825

>= 2012 and < 2112

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that c

7.8HIGH

CVE-2021-22907

< 2105

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR

7.8HIGH

CVE-2020-8207

all versions

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution whe

8.8HIGH

CVE-2019-11634

< 1904

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

9.8CRITICAL