Vulnerabilities of XenDesktop
XenDesktop vulnerability: authentication replay
An attacker, who captured an authentication session on Citrix Web Interface, can replay it, in order to access to victim's space.

XenDesktop vulnerability: code execution via XML Service
An attacker can send a malicious query to Citrix XML Service, in order to execute code.

XenDesktop vulnerability: Cross Site Scripting
An attacker can generate a Cross Site Scripting in Citrix Web Interface, in order to execute JavaScript code in the web browser of the victim, with privileges of another web site.

XenDesktop vulnerability: spoofing of X.509 certificate
An attacker can setup a server with a malicious X.509 certificate, in order to deceive victims connecting with Citrix Online Plug-in or an ICA Client.

XenDesktop vulnerability: Cross Site Scripting
An attacker can generate a Cross Site Scripting in Citrix Web Interface.

Display other vulnerabilities of XenDesktop described by Vigil@nce...

Display information about XenDesktop:

• http://www.citrix.fr/products/xendesktop/overview.html