Unscored severity · published Dec 3, 2005
CVE-2005-3971
Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Metaframe Secure Access Manager · Citrix
2.0; 2.1; 2.2 · source: NVD
NF
Nfuse · Citrix
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3971
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3971
Patch
http://secunia.com/advisories/17819
securitytracker.com
http://securitytracker.com/id?1015304
securitytracker.com
http://securitytracker.com/id?1015305
Patch
http://support.citrix.com/article/CTX108208
Patch
http://www.securityfocus.com/bid/15664
www.vupen.com
http://www.vupen.com/english/advisories/2005/2676