First published: Tue Dec 16 2014(Updated: )
Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: cret@cert.org
Affected Software | Affected Version | How to fix |
---|---|---|
Broadcom Release Automation | <=4.7.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-8247 has a medium severity rating due to its potential for cross-site scripting attacks.
To mitigate CVE-2014-8247, upgrade CA Release Automation to version 4.7.1 or later.
CVE-2014-8247 is a cross-site scripting (XSS) vulnerability affecting CA Release Automation.
CVE-2014-8247 affects users of CA Release Automation versions prior to 4.7.1 b448.
Attackers exploiting CVE-2014-8247 can inject arbitrary web scripts or HTML into the application.