CVE-2004-0787: Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 a...

Security readout for executives and security teams

CVE-2004-0787 is a cross-site scripting flaw in the OpenCA web frontend. A remote attacker could inject script or HTML through form input fields. The business risk depends on whether legacy OpenCA is still deployed and reachable, especially because OpenCA commonly supports certificate authority workflows. Exposure is most likely in legacy environments still running affected OpenCA releases or old certificate authority management systems. Modern environments without OpenCA, or with the frontend removed from network access, are unlikely to be affected. Prioritize if OpenCA manages certificates for business systems or is reachable by untrusted users. If no affected OpenCA deployment exists, record non-exposure and close with evidence. Mitigation focus: Inventory OpenCA deployments and confirm exact frontend versions.; Check OpenCA advisory and vendor guidance for fixed release information.; Restrict access to any legacy OpenCA web frontend until reviewed..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.