This page was not yet optimized for use on mobile devices.

Citrix XenDesktop 7.6 Platinum Edition

Known vulnerabilities detected

Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.

Certificate details

Status	archived
Valid from	19.03.2015
Valid until	19.03.2020
Scheme	🇬🇧 UK
Manufacturer	Citrix Systems, Inc.
Category	Access Control Devices and Systems
Security level	ALC_FLR.2, EAL2+

Certificate

certificate could not be downloaded, no link is available.

Certification report

Certification report PDF TXT

Extracted keywords

Hash functions

MD5

Vendor

Microsoft

Security level

EAL2, EAL1, EAL7, EAL2 augmented

Security Assurance Requirements (SAR)

ALC_FLR.2

Certificates

CRP281, CRP271, CRP282

Standards

ISO/IEC 17065:2012, CCMB-2012-09-001, CCMB-2012-09-002, CCMB-2012-09-003, CCMB-2012-09-004

Cross-references

Outgoing

CRP271 - archived - Citrix XenDesktop Version 5.6 Platinum Edition
CRP282 - archived - Citrix XenApp 7.6 Platinum Edition

Incoming

CRP282 - archived - Citrix XenApp 7.6 Platinum Edition

Creation date	D:20150323095730+00'00'
Modification date	D:20150323095730+00'00'
Pages	26

Security target

Security target PDF TXT

Extracted keywords

Symmetric Algorithms

AES, HMAC

Protocols

TLS

TLS cipher suites

TLS_RSA_WITH_AES_128_CBC_SHA

Vendor

Microsoft

Security level

EAL2, EAL2 augmented

Claims

OE.TLS

Security Assurance Requirements (SAR)

ADV_ARC.1, ADV_FSP.2, ADV_TDS.1, AGD_OPE.1, AGD_PRE.1, ALC_FLR.2, ALC_CMC.2, ALC_CMS.2, ALC_DEL.1, ATE_COV.1, ATE_FUN.1, ATE_IND.2, AVA_VAN.2, ASE_INT.1, ASE_CCL.1, ASE_SPD.1, ASE_OBJ.2, ASE_ECD.1, ASE_REQ.2, ASE_TSS.1

Security Functional Requirements (SFR)

FCO_SCO, FCO_SCO.1, FCO_SCO.1.3, FCO_SCO.1.1, FCO_SCO.1.2, FCO_SCO.1.4, FCS_ECA, FCS_ECA.1, FCS_ECA.1.1, FDP_ACC, FDP_ACF, FDP_ACC.1, FDP_ACF.1, FDP_IFC.1, FIA_ATD, FIA_UID, FIA_UAU, FIA_ATD.1, FIA_UID.2, FIA_UAU.2, FIA_UID.1, FMT_SMR, FMT_SMF, FMT_MSA, FMT_MOF, FMT_SMR.1, FMT_SMF.1, FMT_MSA.1, FMT_MSA.3, FMT_MOF.1

Certification process

out of scope, 1.4.3 Summary of items out of scope of the TOE , 1.4.3 Summary of items out of scope of the TOE, The items out of scope of the TOE include the Microsoft components with which XenDesktop and XenApp integrate, as detailed, Also out of scope of the TOE are the following Citrix components which are included in XenDesktop Platinum Edition

Standards

FIPS140-2, FIPS PUB 140-2, FIPS 140-2, FIPS 140, RFC 2246, CCMB-2012-09-001, CCMB-2012-09-002, CCMB-2012-09-003, CCMB-2012-09-004

Creation date	D:20150319112721+00'00'
Modification date	D:20150319112721+00'00'
Pages	61

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

Certificate ID

CRP281

Extracted SARs

ADV_ARC.1, ADV_FSP.2, ADV_TDS.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.2, ALC_CMS.2, ALC_DEL.1, ALC_FLR.2, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1, ATE_COV.1, ATE_FUN.1, ATE_IND.2, AVA_VAN.2

CPE matches

cpe:2.3:a:citrix:xendesktop:7.6:*:*:*:*:*:*:*

CVE matches

ID	Links	Severity	CVSS Score	Published on
ID	Links	Severity	Base score	Published on
CVE-2014-4700	C N	MEDIUM	4.9	11.07.2014
CVE-2016-4810	C N	HIGH	7.5	01.06.2016
CVE-2016-6493	C N	CRITICAL	9.8	19.08.2016

Similar certificates

Name	Certificate ID	Actions
Citrix XenApp 7.6 Platinum Edition	CRP282	Compare

Cross-references

Processing updates

15.09.2026

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The report property was updated, with the {'txt_hash': '88807ce372195f8d9a90dd3616d9a5bf5fe92cb1b5a9a9a546b9e09cce999d58', 'json_hash': '446d9e6b08dcbaf042e090023ddbd9f58a64e7d1d271394b0c13f369107d2504'} data.

The st property was updated, with the {'txt_hash': '045430cb41cd4f715ccd46cb54123b11fc426db866f5360c40342cc165c4a29c', 'json_hash': '50a808a7167b188b52c3b690436dd94ed55d6a7373b680aab692c8026c820c1f'} data.

The PDF extraction data was updated.

The report_keywords property was updated, with the {'cc_cert_id': {'__update__': {'UK': {'__update__': {'CRP281': 25}}}}, 'cc_security_level': {'__update__': {'EAL': {'__update__': {'EAL2': 7}}}}, 'cc_sar': {'__update__': {'ALC': {'__update__': {'ALC_FLR.2': 7}}}}, 'vendor': {'__update__': {'Microsoft': {'__update__': {'Microsoft': 36}}}}} data.

The st_keywords property was updated, with the {'cc_sfr': {'__update__': {'FDP': {'__update__': {'FDP_ACF': 37}}, 'FMT': {'__update__': {'FMT_MSA': 70, 'FMT_MOF': 12}}}}, 'certification_process': {'__update__': {'OutOfScope': {'__insert__': {'1.4.3 Summary of items out of scope of the TOE ': 1, '1.4.3 Summary of items out of scope of the TOE': 1, 'The items out of scope of the TOE include the Microsoft components with which XenDesktop and XenApp integrate, as detailed': 1, 'Also out of scope of the TOE are the following Citrix components which are included in XenDesktop Platinum Edition': 1}, '__delete__': [' 19 1.4.3 Summary of items out of scope of the TOE ', 'shown shaded are components of the TOE. Figure 4: Logical boundaries 1.4.3 Summary of items out of scope of the TOE The items out of scope of the TOE include the Microsoft components with which XenDesktop', 'XenApp integrate, as detailed in section 1.2.3. Also out of scope of the TOE are the following Citrix components which are included in XenDesktop Platinum Edition']}}}} data.
20.04.2026

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The related_cves property was set to {'_type': 'Set', 'elements': ['CVE-2016-4810', 'CVE-2014-4700', 'CVE-2016-6493']}.

The direct_transitive_cves property was set to {'_type': 'Set', 'elements': ['CVE-2016-4810']}.

The indirect_transitive_cves property was set to {'_type': 'Set', 'elements': ['CVE-2016-4810', 'CVE-2014-4700', 'CVE-2016-6493']}.
02.03.2026

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The _type property was set to sec_certs.sample.cc_eucc_common.InternalState.

The PDF extraction data was updated.

The _type property was set to sec_certs.sample.cc_eucc_common.PdfData.

The computed heuristics were updated.

The _type property was set to sec_certs.sample.cc_eucc_common.Heuristics.

The related_cves property was set to None.

The direct_transitive_cves property was set to None.

The indirect_transitive_cves property was set to None.
15.12.2025

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The report property was updated, with the {'json_hash': None} values inserted.

The st property was updated, with the {'json_hash': None} values inserted.

The cert property was updated, with the {'json_hash': None} values inserted.
23.06.2025

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The direct_transitive_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2016-6493']} values discarded.
05.02.2025

The certificate data changed.
Certificate changed

The protection_profile_links was updated.

This property was added with value {'_type': 'Set', 'elements': []}.

The state of the certificate object was updated.

The report property was updated, with the {'_type': 'sec_certs.sample.document_state.DocumentState'} data.

The st property was updated, with the {'_type': 'sec_certs.sample.document_state.DocumentState'} data.

The cert property was updated, with the {'_type': 'sec_certs.sample.document_state.DocumentState'} data.

The computed heuristics were updated.

The following values were inserted: {'protection_profiles': None, 'eal': 'EAL2+'}.

The prev_certificates property was set to None.

The next_certificates property was set to None.

The Protection Profiles of the certificate were updated.

This property was removed.
21.11.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The following values were inserted: {'prev_certificates': [], 'next_certificates': []}.
14.10.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The related_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2016-4810']} values added.

The direct_transitive_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2016-4810']} values added.

The indirect_transitive_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2016-4810']} values added.
30.09.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The related_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2016-4810']} values discarded.

The direct_transitive_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2016-4810']} values discarded.

The indirect_transitive_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2016-4810']} values discarded.
22.08.2024

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The report property was updated, with the {'download_ok': True, 'convert_ok': True, 'extract_ok': True, 'pdf_hash': 'e1ca015a918dfda3a8369b13b567560cc4f63f6de19e9f3ddffffdfd5b74e659', 'txt_hash': '20119114496653f083aef1b0add3ab22561ddd563a4186db2701d3e6c6d5605f'} data.

The st property was updated, with the {'download_ok': True, 'convert_ok': True, 'extract_ok': True, 'pdf_hash': '6107b2b7a6cecb8165fdc181f171abcc468b31ae01d80cf8da378e4651f93cda', 'txt_hash': '81befd653a9e5c14292f29f8fca093ae6afc7d017d04d3d74d7b009da051d2de'} data.

The PDF extraction data was updated.

The report_metadata property was set to {'pdf_file_size_bytes': 1011675, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 26, '/CreationDate': "D:20150323095730+00'00'", '/ModDate': "D:20150323095730+00'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://www.citrix.com/security', 'http://www.sogisportal.eu/', 'http://www.ukas.org/', 'https://www.citrix.com/', 'http://www.cesg.gov.uk/', 'https://www.citrix.com/support/security-compliance', 'http://support.citrix.com/', 'http://www.commoncriteriaportal.org/']}}.

The st_metadata property was set to {'pdf_file_size_bytes': 960434, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 61, '/CreationDate': "D:20150319112721+00'00'", '/ModDate': "D:20150319112721+00'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['http://support.citrix.com/', 'http://www.commoncriteriaportal.org/']}}.

The report_frontpage property was set to {}.

The report_keywords property was set to {'cc_cert_id': {'UK': {'CRP281': 2, 'CRP271': 3, 'CRP282': 2}}, 'cc_protection_profile_id': {}, 'cc_security_level': {'EAL': {'EAL2': 5, 'EAL1': 1, 'EAL7': 1, 'EAL2 augmented': 1}}, 'cc_sar': {'ALC': {'ALC_FLR.2': 5}}, 'cc_sfr': {}, 'cc_claims': {}, 'vendor': {'Microsoft': {'Microsoft': 30}}, 'eval_facility': {}, 'symmetric_crypto': {}, 'asymmetric_crypto': {}, 'pq_crypto': {}, 'hash_function': {'MD': {'MD5': {'MD5': 1}}}, 'crypto_scheme': {}, 'crypto_protocol': {}, 'randomness': {}, 'cipher_mode': {}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'technical_report_id': {}, 'device_model': {}, 'tee_name': {}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {'ISO': {'ISO/IEC 17065:2012': 2}, 'CC': {'CCMB-2012-09-001': 1, 'CCMB-2012-09-002': 1, 'CCMB-2012-09-003': 1, 'CCMB-2012-09-004': 1}}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {}}.

The st_keywords property was set to {'cc_cert_id': {}, 'cc_protection_profile_id': {}, 'cc_security_level': {'EAL': {'EAL2': 5, 'EAL2 augmented': 2}}, 'cc_sar': {'ADV': {'ADV_ARC.1': 1, 'ADV_FSP.2': 1, 'ADV_TDS.1': 1}, 'AGD': {'AGD_OPE.1': 1, 'AGD_PRE.1': 1}, 'ALC': {'ALC_FLR.2': 5, 'ALC_CMC.2': 1, 'ALC_CMS.2': 1, 'ALC_DEL.1': 1}, 'ATE': {'ATE_COV.1': 1, 'ATE_FUN.1': 1, 'ATE_IND.2': 1}, 'AVA': {'AVA_VAN.2': 1}, 'ASE': {'ASE_INT.1': 1, 'ASE_CCL.1': 1, 'ASE_SPD.1': 1, 'ASE_OBJ.2': 1, 'ASE_ECD.1': 1, 'ASE_REQ.2': 1, 'ASE_TSS.1': 1}}, 'cc_sfr': {'FCO': {'FCO_SCO': 41, 'FCO_SCO.1': 21, 'FCO_SCO.1.3': 2, 'FCO_SCO.1.1': 1, 'FCO_SCO.1.2': 1, 'FCO_SCO.1.4': 1}, 'FCS': {'FCS_ECA': 21, 'FCS_ECA.1': 10, 'FCS_ECA.1.1': 1}, 'FDP': {'FDP_ACC': 36, 'FDP_ACF': 34, 'FDP_ACC.1': 8, 'FDP_ACF.1': 15, 'FDP_IFC.1': 2}, 'FIA': {'FIA_ATD': 10, 'FIA_UID': 10, 'FIA_UAU': 8, 'FIA_ATD.1': 1, 'FIA_UID.2': 1, 'FIA_UAU.2': 1, 'FIA_UID.1': 2}, 'FMT': {'FMT_SMR': 22, 'FMT_SMF': 20, 'FMT_MSA': 61, 'FMT_MOF': 10, 'FMT_SMR.1': 8, 'FMT_SMF.1': 5, 'FMT_MSA.1': 5, 'FMT_MSA.3': 9, 'FMT_MOF.1': 1}}, 'cc_claims': {'OE': {'OE.TLS': 7}}, 'vendor': {'Microsoft': {'Microsoft': 42}}, 'eval_facility': {}, 'symmetric_crypto': {'AES_competition': {'AES': {'AES': 6}}, 'constructions': {'MAC': {'HMAC': 1}}}, 'asymmetric_crypto': {}, 'pq_crypto': {}, 'hash_function': {}, 'crypto_scheme': {}, 'crypto_protocol': {'TLS': {'TLS': {'TLS': 22}}}, 'randomness': {}, 'cipher_mode': {}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {'TLS': {'TLS_RSA_WITH_AES_128_CBC_SHA': 5}}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'technical_report_id': {}, 'device_model': {}, 'tee_name': {}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {'FIPS': {'FIPS140-2': 10, 'FIPS PUB 140-2': 1, 'FIPS 140-2': 10, 'FIPS 140': 2}, 'RFC': {'RFC 2246': 5}, 'CC': {'CCMB-2012-09-001': 1, 'CCMB-2012-09-002': 1, 'CCMB-2012-09-003': 1, 'CCMB-2012-09-004': 1}}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {'OutOfScope': {'out of scope': 4, ' 19 1.4.3 Summary of items out of scope of the TOE ': 2, 'shown shaded are components of the TOE. Figure 4: Logical boundaries 1.4.3 Summary of items out of scope of the TOE The items out of scope of the TOE include the Microsoft components with which XenDesktop': 1, 'XenApp integrate, as detailed in section 1.2.3. Also out of scope of the TOE are the following Citrix components which are included in XenDesktop Platinum Edition': 1}}}.

The report_filename property was set to CRP281 v1.0 Final (NWA).pdf.

The st_filename property was set to XenDesktop7-STv1-0.pdf.

The computed heuristics were updated.

The cert_id property was set to CRP281.

The report_references property was updated, with the {'directly_referenced_by': {'_type': 'Set', 'elements': ['CRP282']}, 'indirectly_referenced_by': {'_type': 'Set', 'elements': ['CRP281', 'CRP282']}, 'directly_referencing': {'_type': 'Set', 'elements': ['CRP271', 'CRP282']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['CRP257', 'CRP241', 'CRP281', 'CRP282', 'CRP271', 'CRP256']}} data.

The extracted_sars property was updated, with the {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_CMC', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_FSP', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_TDS', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_SPD', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_CMS', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AGD_OPE', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_REQ', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AGD_PRE', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_OBJ', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AVA_VAN', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_FUN', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_ARC', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_IND', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_ECD', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_INT', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_CCL', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_DEL', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_COV', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_TSS', 'level': 1}]} values added.

The direct_transitive_cves property was set to {'_type': 'Set', 'elements': ['CVE-2016-4810', 'CVE-2016-6493']}.

The indirect_transitive_cves property was set to {'_type': 'Set', 'elements': ['CVE-2016-4810', 'CVE-2014-4700', 'CVE-2016-6493']}.
17.08.2024

The certificate data changed.
Certificate changed

The report_link was updated.

The new value is https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/CRP281%20v1.0%20Final%20(NWA).pdf.

The st_link was updated.

The new value is https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/XenDesktop7-STv1-0.pdf.
12.08.2024

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The report property was updated, with the {'download_ok': False, 'convert_ok': False, 'extract_ok': False, 'pdf_hash': None, 'txt_hash': None} data.

The st property was updated, with the {'download_ok': False, 'convert_ok': False, 'extract_ok': False, 'pdf_hash': None, 'txt_hash': None} data.

The PDF extraction data was updated.

The report_metadata property was set to None.

The st_metadata property was set to None.

The report_frontpage property was set to None.

The report_keywords property was set to None.

The st_keywords property was set to None.

The report_filename property was set to None.

The st_filename property was set to None.

The computed heuristics were updated.

The cert_id property was set to None.

The report_references property was updated, with the {'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None} data.

The extracted_sars property was updated, with the {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_CMC', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_FSP', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_TDS', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_SPD', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_CMS', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AGD_OPE', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_REQ', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AGD_PRE', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_OBJ', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AVA_VAN', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_FUN', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_ARC', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_IND', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_ECD', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_INT', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_CCL', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_DEL', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_COV', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_TSS', 'level': 1}]} values discarded.

The direct_transitive_cves property was set to None.

The indirect_transitive_cves property was set to None.
23.07.2024

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.cc.CCCertificate",
  "category": "Access Control Devices and Systems",
  "cert_link": null,
  "dgst": "88824cfee521186a",
  "heuristics": {
    "_type": "sec_certs.sample.cc_eucc_common.Heuristics",
    "annotated_references": null,
    "cert_id": "CRP281",
    "cert_lab": null,
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:a:citrix:xendesktop:7.6:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2016-4810"
      ]
    },
    "eal": "EAL2+",
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_PRE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_TDS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_FSP",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_OBJ",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_COV",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_ARC",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMS",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_FLR",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_FUN",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_REQ",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_OPE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_ECD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VAN",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_DEL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_SPD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_TSS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMC",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_IND",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_INT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_CCL",
          "level": 1
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "7.6"
      ]
    },
    "indirect_transitive_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2014-4700",
        "CVE-2016-4810",
        "CVE-2016-6493"
      ]
    },
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": null,
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2014-4700",
        "CVE-2016-4810",
        "CVE-2016-6493"
      ]
    },
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "CRP282"
        ]
      },
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "CRP282",
          "CRP271"
        ]
      },
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "CRP282",
          "CRP281"
        ]
      },
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "CRP257",
          "CRP271",
          "CRP241",
          "CRP281",
          "CRP256",
          "CRP282"
        ]
      }
    },
    "scheme_data": null,
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "maintenance_updates": {
    "_type": "Set",
    "elements": []
  },
  "manufacturer": "Citrix Systems, Inc.",
  "manufacturer_web": "https://www.citrix.com",
  "name": "Citrix XenDesktop 7.6 Platinum Edition",
  "not_valid_after": "2020-03-19",
  "not_valid_before": "2015-03-19",
  "pdf_data": {
    "_type": "sec_certs.sample.cc_eucc_common.PdfData",
    "cert_filename": null,
    "cert_frontpage": null,
    "cert_keywords": null,
    "cert_metadata": null,
    "report_filename": "CRP281 v1.0 Final (NWA).pdf",
    "report_frontpage": {},
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "UK": {
          "CRP271": 3,
          "CRP281": 25,
          "CRP282": 2
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ALC": {
          "ALC_FLR.2": 7
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL1": 1,
          "EAL2": 7,
          "EAL2 augmented": 1,
          "EAL7": 1
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCMB-2012-09-001": 1,
          "CCMB-2012-09-002": 1,
          "CCMB-2012-09-003": 1,
          "CCMB-2012-09-004": 1
        },
        "ISO": {
          "ISO/IEC 17065:2012": 2
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 36
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/CreationDate": "D:20150323095730+00\u002700\u0027",
      "/ModDate": "D:20150323095730+00\u002700\u0027",
      "pdf_file_size_bytes": 1011675,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.commoncriteriaportal.org/",
          "http://support.citrix.com/",
          "http://www.sogisportal.eu/",
          "https://www.citrix.com/",
          "http://www.cesg.gov.uk/",
          "https://www.citrix.com/support/security-compliance",
          "http://www.ukas.org/",
          "https://www.citrix.com/security"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 26
    },
    "st_filename": "XenDesktop7-STv1-0.pdf",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {
        "OE": {
          "OE.TLS": 7
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_ARC.1": 1,
          "ADV_FSP.2": 1,
          "ADV_TDS.1": 1
        },
        "AGD": {
          "AGD_OPE.1": 1,
          "AGD_PRE.1": 1
        },
        "ALC": {
          "ALC_CMC.2": 1,
          "ALC_CMS.2": 1,
          "ALC_DEL.1": 1,
          "ALC_FLR.2": 5
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 1,
          "ASE_INT.1": 1,
          "ASE_OBJ.2": 1,
          "ASE_REQ.2": 1,
          "ASE_SPD.1": 1,
          "ASE_TSS.1": 1
        },
        "ATE": {
          "ATE_COV.1": 1,
          "ATE_FUN.1": 1,
          "ATE_IND.2": 1
        },
        "AVA": {
          "AVA_VAN.2": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL2": 5,
          "EAL2 augmented": 2
        }
      },
      "cc_sfr": {
        "FCO": {
          "FCO_SCO": 41,
          "FCO_SCO.1": 21,
          "FCO_SCO.1.1": 1,
          "FCO_SCO.1.2": 1,
          "FCO_SCO.1.3": 2,
          "FCO_SCO.1.4": 1
        },
        "FCS": {
          "FCS_ECA": 21,
          "FCS_ECA.1": 10,
          "FCS_ECA.1.1": 1
        },
        "FDP": {
          "FDP_ACC": 36,
          "FDP_ACC.1": 8,
          "FDP_ACF": 37,
          "FDP_ACF.1": 15,
          "FDP_IFC.1": 2
        },
        "FIA": {
          "FIA_ATD": 10,
          "FIA_ATD.1": 1,
          "FIA_UAU": 8,
          "FIA_UAU.2": 1,
          "FIA_UID": 10,
          "FIA_UID.1": 2,
          "FIA_UID.2": 1
        },
        "FMT": {
          "FMT_MOF": 12,
          "FMT_MOF.1": 1,
          "FMT_MSA": 70,
          "FMT_MSA.1": 5,
          "FMT_MSA.3": 9,
          "FMT_SMF": 20,
          "FMT_SMF.1": 5,
          "FMT_SMR": 22,
          "FMT_SMR.1": 8
        }
      },
      "certification_process": {
        "OutOfScope": {
          "1.4.3 Summary of items out of scope of the TOE": 1,
          "1.4.3 Summary of items out of scope of the TOE ": 1,
          "Also out of scope of the TOE are the following Citrix components which are included in XenDesktop Platinum Edition": 1,
          "The items out of scope of the TOE include the Microsoft components with which XenDesktop and XenApp integrate, as detailed": 1,
          "out of scope": 4
        }
      },
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 22
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCMB-2012-09-001": 1,
          "CCMB-2012-09-002": 1,
          "CCMB-2012-09-003": 1,
          "CCMB-2012-09-004": 1
        },
        "FIPS": {
          "FIPS 140": 2,
          "FIPS 140-2": 10,
          "FIPS PUB 140-2": 1,
          "FIPS140-2": 10
        },
        "RFC": {
          "RFC 2246": 5
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 6
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_RSA_WITH_AES_128_CBC_SHA": 5
        }
      },
      "vendor": {
        "Microsoft": {
          "Microsoft": 42
        }
      },
      "vulnerability": {}
    },
    "st_metadata": {
      "/CreationDate": "D:20150319112721+00\u002700\u0027",
      "/ModDate": "D:20150319112721+00\u002700\u0027",
      "pdf_file_size_bytes": 960434,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://support.citrix.com/",
          "http://www.commoncriteriaportal.org/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 61
    }
  },
  "protection_profile_links": {
    "_type": "Set",
    "elements": []
  },
  "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/CRP281%20v1.0%20Final%20(NWA).pdf",
  "scheme": "UK",
  "security_level": {
    "_type": "Set",
    "elements": [
      "ALC_FLR.2",
      "EAL2+"
    ]
  },
  "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/XenDesktop7-STv1-0.pdf",
  "state": {
    "_type": "sec_certs.sample.cc_eucc_common.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "446d9e6b08dcbaf042e090023ddbd9f58a64e7d1d271394b0c13f369107d2504",
      "source_hash": "e1ca015a918dfda3a8369b13b567560cc4f63f6de19e9f3ddffffdfd5b74e659",
      "txt_hash": "88807ce372195f8d9a90dd3616d9a5bf5fe92cb1b5a9a9a546b9e09cce999d58"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "50a808a7167b188b52c3b690436dd94ed55d6a7373b680aab692c8026c820c1f",
      "source_hash": "6107b2b7a6cecb8165fdc181f171abcc468b31ae01d80cf8da378e4651f93cda",
      "txt_hash": "045430cb41cd4f715ccd46cb54123b11fc426db866f5360c40342cc165c4a29c"
    }
  },
  "status": "archived"
}

Sections

Citrix XenDesktop 7.6 Platinum Edition

Known vulnerabilities detected

Certificate details

Certificate

Certification report

Extracted keywords

Cryptography

Hash functions

Device

Vendor

Common Criteria

Security level

Security Assurance Requirements (SAR)

Certificates

Other

Standards

Cross-references

File metadata

Security target

Extracted keywords

Cryptography

Symmetric Algorithms

Protocols

TLS cipher suites

Device

Vendor

Common Criteria

Security level

Claims

Security Assurance Requirements (SAR)

Security Functional Requirements (SFR)

Security

Certification process

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Certificate ID

Extracted SARs

CPE matches

CVE matches

Similar certificates

Cross-references

Processing updates

Raw data

Toggle raw data