Unrated severityNVD Advisory· Published Oct 10, 2014· Updated May 6, 2026
CVE-2014-4661
CVE-2014-4661
Description
Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
4cpe:2.3:a:hp:records_manager:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:hp:records_manager:*:*:*:*:*:*:*:*range: <=7.3.4
- cpe:2.3:a:hp:records_manager:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:records_manager:8.1:patch1:*:*:*:*:*:*
- cpe:2.3:a:hp:records_manager:8.1:patch2:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplaynvdVendor Advisory
- www.kb.cert.org/vuls/id/683972nvdUS Government Resource
- www.securityfocus.com/bid/70286nvd
News mentions
0No linked articles in our index yet.