citrix xenmobile-server CVE-2020-8211 is a vulnerability in Citrix Xenmobile Server
Published on August 17, 2020

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection.

NVD

Weakness Type

What is a Command Injection Vulnerability?

The software constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

CVE-2020-8211 has been classified to as a Command Injection vulnerability or weakness.


Products Associated with CVE-2020-8211

Want to know whenever a new CVE is published for Citrix Xenmobile Server? stack.watch will email you.

 

Exploit Probability

EPSS
0.53%
Percentile
66.72%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.