CVE-2005-3971 Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML....
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix metaframe secure access manager | = 2.0 | No fix listed |
| citrix metaframe secure access manager | = 2.1 | No fix listed |
| citrix metaframe secure access manager | = 2.2 | No fix listed |
| citrix nfuse | = 1.0 | No fix listed |
References
- 17819 patch third-party-advisory vendor-advisory
- 1015304 vdb-entry
- 1015305 vdb-entry
- support.citrix.com patch vendor-advisory
- 15664 patch vdb-entry
- ADV-2005-2676 vdb-entry
- citrix-login-xss(23396) vdb-entry