XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.
https://support.citrix.com/article/CTX220138
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-18169