vulnerability announce CVE-2009-2454

Citrix Web Interface: Cross Site Scripting

Synthesis of the vulnerability

An attacker can generate a Cross Site Scripting in Citrix Web Interface.

Severity: 2/4. Creation date: 29/04/2009.

Description of the vulnerability

The Citrix Web Interface (CWI) product can be installed to work with XenApp and XenDesktop. An attacker can generate a Cross Site Scripting in Citrix Web Interface. Technical details are unknown.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: Citrix Web Interface: Cross Site Scripting. Keywords: CWI Citrix Cross Interface Scripting Site Web XenApp XenDesktop. Identifiers: BID-34761, CTX120697, CVE-2009-2454, VIGILANCE-VUL-8682.

Information sources

Publications and announces Source example: Cross-Site Scripting Vulnerability in Citrix Web Interface

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Computer applications vulnerability