CVE-2014-4700
published 2014-07-11CVE-2014-4700: Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain…
PriorityP418medium4.9CVSS 2.0
AVAACMAuSCPIPAP
EPSS
0.61%
44.5th percentile
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_hypervisor | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | endpoint_management | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | xendesktop | — | — |
| citrix | xendesktop | — | — |
| citrix | xendesktop | — | — |
| citrix | xendesktop | 5.0 – 5.6 | — |
| citrix | xendesktop | 7.0 – 7.11 | — |
| citrix | xenserver | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7g6q-fw46-cpmr: Citrix XenDesktop 7
ghsa_unreviewed·2022-05-14
CVE-2014-4700 [MEDIUM] GHSA-7g6q-fw46-cpmr: Citrix XenDesktop 7
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
Citrix
CVE-2014-4700: Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users t
vendor_citrix·2014-07-11·CVSS 4.9
CVE-2014-4700 [MEDIUM] CWE-264 CVE-2014-4700: Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users t
CVE-2014-4700: Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
Citrix
Citrix Security Bulletin CTX139591
vendor_citrix·CVSS 4.9
CVE-2014-4700 [MEDIUM] Citrix Security Bulletin CTX139591
Citrix Security Bulletin CTX139591
CVE References: CVE-2014-4700, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/59889http://support.citrix.com/article/CTX139591http://www.securityfocus.com/bid/68530http://www.securitytracker.com/id/1030566https://exchange.xforce.ibmcloud.com/vulnerabilities/94460http://secunia.com/advisories/59889http://support.citrix.com/article/CTX139591http://www.securityfocus.com/bid/68530http://www.securitytracker.com/id/1030566https://exchange.xforce.ibmcloud.com/vulnerabilities/94460
2014-07-11
Published