CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Sep 6, 2023

CVE-2023-24489

High

EPSS 94.4%CISA KEV

Citrix/Content Collaboration

Description

Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.

EPSS — Exploit Probability

94.4%

Higher than 100.0% of all CVEs

Required Action

https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489; https://nvd.nist.gov/vuln/detail/CVE-2023-24489

Risk Assessment

HIGH

In CISA KEV

High EPSS

Details

Severity: High
EPSS: 94.4%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Aug 16, 2023

Added to KEV

Aug 16, 2023

Remediation Due

Sep 6, 2023

Affected Product

Citrix

Content Collaboration

View all Citrix CVEs

External Links

NVD (NIST)CVE Details MITRE CVE