Skip to content

CVE-2015-7349 Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface allows remote attackers to inject arbitrary web script or HTM...

MediumCVSS 6.1 EPSS 1.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface allows remote attackers to inject arbitrary web script or HTML via the failmessage parameter.

Affected products

ProductAffected versionsFixed in
vasco digipass All versions No fix listed

References

  • labs.integrity.pt exploit mitigation technical-description third-party-advisory
  • www.vasco.com exploit mitigation technical-description vendor-advisory
  • www.vasco.com exploit mitigation technical-description vendor-advisory