CVE-2007-6477

MEDIUM 4.3CVE-2007-6477 · Published 20/12/2007 · updated 16/06/2026

In short

CVE-2007-6477 is a MEDIUM (CVSS 4.3) vulnerability affecting web interface (citrix).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
web interface citrix	`≤ 2.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

secunia.com/advisories/28150 · Patch
support.citrix.com/article/CTX115283 · Patch
securityfocus.com/bid/26933
securitytracker.com/id
vupen.com/english/advisories/2007/4254
exchange.xforce.ibmcloud.com/vulnerabilities/39123

More vulnerabilities in web interface

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free