CVE-2018-10654
published 2018-05-23CVE-2018-10654: There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
PriorityP342high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
1.23%
65.2th percentile
There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_hypervisor | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | endpoint_management | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | xenmobile_server | — | — |
| citrix | xenmobile_server | — | — |
| citrix | xenserver | — | — |
CVSS provenance
nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Citrix
CVE-2018-10654: There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
vendor_citrix·2018-05-23·CVSS 8.1
CVE-2018-10654 [HIGH] CWE-502 CVE-2018-10654: There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
CVE-2018-10654: There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
Citrix
Citrix Security Bulletin CTX234879
vendor_citrix·CVSS 9.8
CVE-2018-10648 [CRITICAL] Citrix Security Bulletin CTX234879
Citrix Security Bulletin CTX234879
CVE References: CVE-2018-10648, CVE-2018-10649, CVE-2018-10650, CVE-2018-10651, CVE-2018-10652, CVE-2018-10653, CVE-2018-10654, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
GHSA
GHSA-phhp-5h4r-6w6w: There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10
ghsa_unreviewed·2022-05-14
CVE-2018-10654 [HIGH] CWE-502 GHSA-phhp-5h4r-6w6w: There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10
There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-05-23
Published