Vulnerability in Citrix Metaframe Secure Access Manager

CVE-2005-3971

Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field.

EPSS: 0.014 (69.8th percentile) — read the EPSS interpretation.

Affected products

Citrix Metaframe_secure_access_manager — versions 2.0, 2.1, 2.2
Citrix Nfuse — versions 1.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)