VYPR
← All advisories
High severity8.1NVD Advisory· Published May 23, 2018· Updated Jun 17, 2026

CVE-2018-10654

CVE-2018-10654

Description

There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.

Affected products

7
  • Hazelcast/Hazelcastinferred
  • Citrix Systems/Xenmobile Serverllm-fuzzy6 versions
    10.7 before RP3, 10.8 before RP2+ 5 more
    • (no CPE)range: 10.7 before RP3, 10.8 before RP2
    • cpe:2.3:a:citrix:xenmobile_server:10.8:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.8:rp1:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.7:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.7:rp1:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.7:rp2:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.