Approved changes feed: RSS · Atom

cpe:2.3:a:citrix:nfuse:1.51:*:*:*:*:*:*:*

part: a version: 1.51 update: *

VendorCitrix (d4086e08-6d3e-5a9c-9da4-36397da0fc58)
ProductNfuse (7b79002c-3042-552e-8bdf-03023f9d7082)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0504 vulnerable 2026-06-08 04:46:21.586620 Details available
Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0760 vulnerable 2026-06-08 04:45:20.771829 Details available
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
Published: 2002-03-09T05:00:00.000Z
Updated: 2024-08-08T04:30:06.101Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.