[security bulletin] HPSBGN03108 rev.1 - HP Records Manager, Remote Cross-Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04441391 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04441391 Version: 1 SUPPORT...

CVE-2014-4661

Cross-site scripting XSS vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4661

CVE-2014-4661: HP Records Manager is affected by a remote XSS in HP Records Manager 7.3.5 and 8.x up to 8.1 Patch 3. HP notes that HP Records Manager v8.1 Patch 3 and v7.3.5 (and earlier) are impacted; the vulnerability allows remote injection of script/HTML via unspecified vectors. Remediation p...