CVE-2011-1899

CVE-2011-1899 describes multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2. The root cause is insufficient validation of sent request parameters, enabling remote attackers to inject arbitrary web script or HTML via unspecified parameters. The issue wa...

CA20110510-01: Security Notice for CA eHealth

-----BEGIN PGP SIGNED MESSAGE----- CA20110510-01: Security Notice for CA eHealth Issued: May 10, 2011 CA Technologies support is alerting customers to a security risk with CA eHealth. A vulnerability exists that may potentially allow an attacker to compromise web user security. The vulnerability,...