Unrated severityNVD Advisory· Published Oct 10, 2014· Updated Jun 17, 2026
CVE-2014-4661
CVE-2014-4661
Description
Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
5cpe:2.3:a:hp:records_manager:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:hp:records_manager:*:*:*:*:*:*:*:*range: <=7.3.4
- cpe:2.3:a:hp:records_manager:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:records_manager:8.1:patch1:*:*:*:*:*:*
- cpe:2.3:a:hp:records_manager:8.1:patch2:*:*:*:*:*:*
- (no CPE)range: <7.3.5 or <=8.0 before 8.1 Patch 3
Patches
Vulnerability mechanics
References
3- h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplaynvdVendor Advisory
- www.kb.cert.org/vuls/id/683972nvdUS Government Resource
- www.securityfocus.com/bid/70286nvd
News mentions
0No linked articles in our index yet.