CVE-2019-13608
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
CVSS
—
No CVSS
EPSS
30.0%
p98
KEV
YES
Nov 3, 2021
Exploit Today
79
0-100
Published: — · Last modified: —
30.0%EPSS · 30 days30.3%
2026-06-302026-07-16
Product
Citrix / StoreFront Server
Vulnerability
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
Yes
Summary description
Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-13608
No related CVEs by CWE or product.