Sharefile Storagezones Controller vulnerabilitiesAnd the versions its exploited flaws hit.

Product1 known exploited42 versions
The short answer

Sharefile Storagezones Controller is made by Citrix. We track 8 published vulnerabilities in it, across 42 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 25 March 2022. If you run Sharefile Storagezones Controller, check your version against the exploited flaws below and patch those first.

Check your version

The most recent Sharefile Storagezones Controller flaw added to the known-exploited list is CVE-2021-22941, on 25 March 2022. We keep watching the known-exploited list.

Versions

Which versions of Sharefile Storagezones Controller do the exploited flaws hit?

Each exploited flaw lists the versions it affects, usually as ranges. "before 5.11.20" means every version up to, but not including, 5.11.20. Find your version, then patch.

  • CVE-2021-22941Exploited list, 25 Mar 2022

    Citrix ShareFile Improper Access Control Vulnerability

    before 5.11.20
Known exploited

Which Sharefile Storagezones Controller vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 9.8
    CVE-2021-22941CriticalKnown exploited
    Citrix ShareFile Improper Access Control Vulnerability

    Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.

    Chance of use54%Known exploited since25 Mar 2022
Exploit likelihood

Which Sharefile Storagezones Controller flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 54%
    CVE-2021-22941CriticalKnown exploited

    Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.

    CVSS9.8Published23 Sep 2021
  2. 27%

    An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020.

    CVSS7.5Published7 May 2020
  3. 14%

    In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents...

    CVSS7.5Published7 May 2020
  4. 4.5%

    An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, which allows remote code execution.

    CVSS7.5Published7 May 2020
  5. 1.1%

    Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message.

    CVSS4.3Published26 Sep 2018
  6. 1.1%

    A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller.

    CVSS9.8Published27 May 2021
  7. 1.1%

    Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.

    CVSS3.1Published26 Sep 2018
  8. 0.4%

    An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled.

    CVSS7.5Published16 Aug 2021
EdgeProtect

Running Sharefile Storagezones Controller? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 8 published vulnerabilities listed under the name Sharefile Storagezones Controller, across 42 versions. The most recent Sharefile Storagezones Controller flaw added to the known-exploited list is CVE-2021-22941, on 25 March 2022.

1 is on the list of flaws known to be exploited. The most recently added is CVE-2021-22941.

Each flaw names its own versions, usually as ranges. The newest, CVE-2021-22941, affects before 5.11.20. The versions for every exploited flaw are listed on this page.

Create a EdgeProtect account and track Sharefile Storagezones Controller. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.