Approved changes feed: RSS · Atom

cpe:2.3:a:citrix:secure_access_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCitrix (d4086e08-6d3e-5a9c-9da4-36397da0fc58)
ProductSecure Access Client (1f277fbd-64e7-5145-8474-6c04870e153f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1223 vulnerable 2026-06-08 07:06:37.171868 An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac
Published: 2025-02-20T00:07:27.949Z
Updated: 2025-02-20T16:21:58.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1222 vulnerable 2026-06-08 07:06:37.171406 An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac
Published: 2025-02-20T00:05:23.829Z
Updated: 2025-02-20T16:27:56.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0320 vulnerable 2026-06-08 07:02:24.350518 Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows
Published: 2025-06-17T13:25:22.351Z
Updated: 2026-02-26T17:50:33.431Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3661 vulnerable 2026-06-08 06:43:51.134000 DHCP routing options can manipulate interface-based VPN traffic
HIGH (7.6)
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.
Published: 2024-05-06T18:31:21.217Z
Updated: 2024-08-28T19:09:06.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24492 vulnerable 2026-06-08 05:56:05.628014 Details available
CRITICAL (9.6)
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts.
Published: 2023-07-11T21:36:52.664Z
Updated: 2024-11-07T15:18:05.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24491 vulnerable 2026-06-08 05:56:05.626135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.