Citrix Storefront Server — known CVE vulnerabilities

Every CVE whose affected-product data names Citrix Storefront Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-13608 — CVSS 7.5 (high) — actively exploited: Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
• CVE-2020-8200 — CVSS 6.5 (medium): Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active…
• CVE-2022-27503 — CVSS 6.1 (medium): Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9