CVE-2017-5572
published 2017-01-30CVE-2017-5572: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database.
PriorityP427medium6.5CVSS 3.0
AVNACLPRHUINSUCNIHAH
EPSS
1.09%
65.3th percentile
An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_hypervisor | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | endpoint_management | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | xenserver | — | — |
| citrix | xenserver | — | — |
| citrix | xenserver | — | — |
| citrix | xenserver | — | — |
| citrix | xenserver | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Citrix
CVE-2017-5572: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host databa
vendor_citrix·2017-01-30·CVSS 6.5
CVE-2017-5572 [MEDIUM] CWE-269 CVE-2017-5572: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host databa
CVE-2017-5572: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database.
Citrix
Citrix Security Bulletin CTX220112
vendor_citrix·CVSS 7.5
CVE-2015-7704 [HIGH] Citrix Security Bulletin CTX220112
Citrix Security Bulletin CTX220112
CVE References: CVE-2015-7704, CVE-2015-7705, CVE-2017-5572, CVE-2017-5573, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
Citrix
Citrix Security Bulletin CTX220112
vendor_citrix·CVSS 6.5
CVE-2017-5572 [MEDIUM] Citrix Security Bulletin CTX220112
Citrix Security Bulletin CTX220112
CVE References: CVE-2017-5572, CVE-2017-5573, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
VulDB
Citrix XenServer 6.0.2/6.2.0/6.5/7.0 Host Database access control (CTX220112 / CTX220079/CTX220080/CTX220081)
vuldb·2026-05-17·CVSS 6.5
CVE-2017-5572 [MEDIUM] Citrix XenServer 6.0.2/6.2.0/6.5/7.0 Host Database access control (CTX220112 / CTX220079/CTX220080/CTX220081)
A vulnerability classified as problematic has been found in Citrix XenServer 6.0.2/6.2.0/6.5/7.0. This impacts an unknown function of the component Host Database. Performing a manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2017-5572. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
GHSA
GHSA-mvwc-6gpj-59wm: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7
ghsa_unreviewed·2022-05-13
CVE-2017-5572 [MEDIUM] CWE-269 GHSA-mvwc-6gpj-59wm: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7
An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-01-30
Published