CVE-2014-4661: XSS
Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4661?
CVE-2014-4661 has a severity rating that indicates a medium risk due to the potential for cross-site scripting attacks.
How do I fix CVE-2014-4661?
To fix CVE-2014-4661, upgrade HP Records Manager to version 7.3.5 or above, or to version 8.1 Patch 3 or later.
What types of attacks can CVE-2014-4661 enable?
CVE-2014-4661 can enable remote attackers to inject arbitrary web scripts or HTML, leading to cross-site scripting attacks.
Which versions of HP Records Manager are affected by CVE-2014-4661?
HP Records Manager versions prior to 7.3.5 and 8.x versions before 8.1 Patch 3 are affected by CVE-2014-4661.
Are there any specific vectors for exploiting CVE-2014-4661?
The exploitation of CVE-2014-4661 can occur through unspecified vectors, which are not clearly defined in the vulnerability details.