What’s Vulnerable › Vulnerabilities

CVE-2014-4661

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-10-10 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• HP Records Manager: through 7.3.4; 8.1, 8.1-patch1, 8.1-patch2

References

• http://www.kb.cert.org/vuls/id/683972
• http://www.securityfocus.com/bid/70286
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04441391
• http://www.kb.cert.org/vuls/id/683972
• http://www.securityfocus.com/bid/70286
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04441391

Get alerted when CVE-2014-4661 or the next vulnerability affects your stack