CVE-2019-13608

7.5 highKEVEPSS 30%

High (7.5) in Citrix StoreFront Server. In CISA KEV since 2021-11-03, with known ransomware use. EPSS 30% chance of exploitation in the next 30 days.

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 30% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2021-11-03, due 2022-05-03, known ransomware use
CWE: CWE-611
Published: 2019-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19