cve.bz

CVE-2024-8068

5.1 mediumKEVEPSS 3.5%

Medium (5.1) in Citrix Session Recording. In CISA KEV since 2025-08-25. EPSS 3.5% chance of exploitation in the next 30 days.

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

Severity

CVSS 4.0

5.1 medium
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

8.0 high
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2025-08-25, due 2025-09-15
CWE
CWE-269
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON