CVE-2014-2631

CVE-2014-2631 affects HP Application Lifecycle Management / Quality Center 11.5x and 12.0x. The root cause is a DLL planting elevation-of-privilege flaw in ACLs on a specific installed directory, enabling a remote attacker with an unprivileged account to place a malicious DLL and trigger code exe...

CVE-2013-4802

CVE-2013-4802 affects HP Application Lifecycle Management (ALM) Quality Center prior to v11.51. The flaw is a cross-site scripting (XSS) vulnerability due to improper sanitization of HTML messages, allowing remote attackers to inject arbitrary JavaScript via unspecified vectors. Exploitation requ...