CVE-2002-0502 Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page.

MediumCVSS 5.0 EPSS 3.6% Public exploit

Published: 2002-06-11 07:00
Updated: 2026-06-17 00:57
Exploit status: Public exploit available

Sign in for asset impact Search another CVE

Description

Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page.

Affected products

Product	Affected versions	Fixed in
citrix nfuse	= 1.6	No fix listed

References

20020122 Citrix NFuse 1.6 mailing-list vendor-advisory
20020123 RE: Citrix NFuse 1.6 mailing-list vendor-advisory
3926 vdb-entry vendor-advisory
nfuse-applist-information-disclosure(7984) vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.59% (percentile 89.6)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Citrix Nfuse 1.6 - Published Applications Information Leak Exploit · Exploit Database (OffSec) · 2002-01-22