Citrix has come out with a advisory with list of apps that are under investigation for Log4j vulnerability. As of now almost all the applications of Citrix are not impacted by Log4j Vulnerability. But still some of the apps under Citrix Virtual Apps and Desktop is under investigation for Log4j vulnerability. Citrix may update more about in the coming days. The below table provides you a list of all the apps in the Citrix advisory
| Product | Version | Status | Patched |
|---|---|---|---|
| Citrix ADC (NetScaler ADC) | All versions | Not Vulnerable | Not Needed |
| Citrix Gateway (NetScaler Gateway) | All versions | Not Vulnerable | Not Needed |
| Citrix Application Delivery Management | All versions | Not Vulnerable | Not Needed |
| Citrix Cloud Connector | All versions | Not Vulnerable | Not Needed |
| Citrix Connector Appliance for Cloud Services | All versions | Not Vulnerable | Not Needed |
| Citrix Endpoint Management | All versions | Not Vulnerable | Not Needed |
| Citrix Hypervisor | All versions | Not Vulnerable | Not Needed |
| Citrix License Server | All versions | Not Vulnerable | Not Needed |
| Citrix SD-WAN | All versions | Not Vulnerable | Not Needed |
| Citrix ShareFile Storage Zones Controller | All versions | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | App Layering | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | Delivery Controller | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | Director | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | FAS | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | HDX | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | Profile Management | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | PVS | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | Session Recording | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | Storefront | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | Studio | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | Windows VDA | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | WEM | Not Vulnerable | Not Needed |
| Citrix Virtual Apps & Desktop | All Other components | Investigation | Not Needed |
| Citrix Workspace App | All versions | Not Vulnerable | Not Needed |