HIGHCVSS 8.0Actively exploited · CISA KEV since 2025-08-25Vulnerability
CVE-2024-8068
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.
Properties
- Euvd product
- Citrix Session Recording
- Vulnerability name
- Citrix Session Recording Improper Privilege Management Vulnerability
- First seen
- 2025-10-21T22:55:37+00:00
- Cvss score
- 8
- Epss score
- 0.03481
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2025-09-15
- Euvd assigner
- Citrix
- Retrieved at
- 2026-10-21T01:24:47+00:00
- Exploited euvd since
- 2025-08-25T00:00:00+00:00
- Src batch id
- epss_history-20261020T103617Z-728ddd
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2025-08-25
- Score
- 8
- Euvd base score version
- 4.0
- Fetched at
- 2026-10-20T10:36:20+00:00
- Euvd vendor
- Citrix, Citrix Session Recording
- Cvss vector
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 5.1
Related Entities (21)
AFFECTS_PRODUCT (18)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph