[security bulletin] HPSBGN02950 rev.1 - HP Autonomy Ultraseek, Cross-Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04041082 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04041082 Version: 1 HPSBGN02950 rev....

CVE-2013-6196

HP Autonomy Ultraseek 5.x is affected by CVE-2013-6196: a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. Root cause involves improper input handling in Ultraseek 5, with impact limited to authenticated users...