CVE-2015-2683
published 2015-03-26CVE-2015-2683: Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet…
PriorityP351high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
5.24%
91.5th percentile
Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_hypervisor | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | command_center | — | — |
| citrix | command_center | — | — |
| citrix | endpoint_management | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | xenserver | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Citrix
CVE-2015-2683: Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX)
vendor_citrix·2015-03-26·CVSS 7.5
CVE-2015-2683 [HIGH] CWE-264 CVE-2015-2683: Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX)
CVE-2015-2683: Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic.
Citrix
Citrix Security Bulletin CTX200584
vendor_citrix·CVSS 5.0
CVE-2015-2682 [MEDIUM] Citrix Security Bulletin CTX200584
Citrix Security Bulletin CTX200584
CVE References: CVE-2015-2682, CVE-2015-2683, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
GHSA
GHSA-9wch-45vf-46vq: Citrix Command Center before 5
ghsa_unreviewed·2022-05-14
CVE-2015-2683 [HIGH] GHSA-9wch-45vf-46vq: Citrix Command Center before 5
Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/130930/Citrx-Command-Center-Advent-JMX-Servlet-Accessible.htmlhttp://seclists.org/fulldisclosure/2015/Mar/127http://support.citrix.com/article/CTX200584http://www.securityfocus.com/archive/1/534933/100/0/threadedhttp://www.securityfocus.com/bid/73313http://www.securitytracker.com/id/1031993https://www.securify.nl/advisory/SFY20140804/advent_jmx_servlet_of_citrx_command_center_is_accessible_to_unauthenticated_users.htmlhttp://packetstormsecurity.com/files/130930/Citrx-Command-Center-Advent-JMX-Servlet-Accessible.htmlhttp://seclists.org/fulldisclosure/2015/Mar/127http://support.citrix.com/article/CTX200584http://www.securityfocus.com/archive/1/534933/100/0/threadedhttp://www.securityfocus.com/bid/73313http://www.securitytracker.com/id/1031993https://www.securify.nl/advisory/SFY20140804/advent_jmx_servlet_of_citrx_command_center_is_accessible_to_unauthenticated_users.html
2015-03-26
Published