Security Advisory

CVE-2002-0504

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-06-11 04:00:00
Last updated 2024-08-08 02:49:28
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.