VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Apr 16, 2026

CVE-2002-0504

CVE-2002-0504

Description

Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.

Affected products

2
  • Citrix Systems/Nfuse2 versions
    cpe:2.3:a:citrix:nfuse:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:citrix:nfuse:*:*:*:*:*:*:*:*range: <=1.6
    • cpe:2.3:a:citrix:nfuse:1.51:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.