CVE-2002-0504

Currently unrated

Key Information:

Vendor
Citrix
Status
Nfuse
Vendor
CVE Published:
12 August 2002

Summary

Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.

References

http://www.iss.net/security_center/static/8659.php
vdb-entryx_refsource_XF
http://archives.neohapsis.com/archives/bugtraq/2002-03/03...
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/4372
vdb-entryx_refsource_BID

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.