How severe is CVE-2025-1222?

CVE-2025-1222 has a CVSS 3.x base score of 6.1, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity low, and availability none.

Is CVE-2025-1222 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (5th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-1222?

CVE-2025-1222 affects Citrix Secure Access Client. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-1222?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-1222 have an EU (EUVD) identifier?

Yes. CVE-2025-1222 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-4632.

When was CVE-2025-1222 published?

CVE-2025-1222 was published on 2025-02-20 and last updated on 2026-06-17.

CVE-2025-1222

CVE-2025-1222 is a medium-severity vulnerability in Citrix Secure Access Client with a CVSS 3.x base score of 6.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 3.x base score 6.1)
CVSS v4: 5.9
EPSS exploit prediction: 0% (5th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-4632
Affected product: Citrix Secure Access Client
Published: 2025-02-20
Last modified: 2026-06-17

Description

An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac

Frequently asked questions

What is CVE-2025-1222?: An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac
How severe is CVE-2025-1222?: CVE-2025-1222 has a CVSS 3.x base score of 6.1, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity low, and availability none.
Is CVE-2025-1222 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (5th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-1222?: CVE-2025-1222 affects Citrix Secure Access Client. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-1222?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-1222 have an EU (EUVD) identifier?: Yes. CVE-2025-1222 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-4632.
When was CVE-2025-1222 published?: CVE-2025-1222 was published on 2025-02-20 and last updated on 2026-06-17.

References

https://support.citrix.com/s/article/CTX692679-citrix-secure-access-client-for-mac-security-bulletin-for-cve20251222-and-cve20251223?language=en_US

Affected products (1)

cpe:2.3:a:citrix:secure_access_client:*:*:*:*:*:*:*:*

More vulnerabilities in Citrix Secure Access Client

CVE-2023-24492 — Critical (CVSS 9.6): A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an…
CVE-2025-0320 — High (CVSS 7.8): Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for…
CVE-2023-24491 — High (CVSS 7.8): A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow…
CVE-2024-3661 — High (CVSS 7.6): DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security…
CVE-2025-1223 — Medium (CVSS 6.1): An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data…

All CVEs affecting Citrix Secure Access Client →