CVEvulnerability
CVE-2014-8247
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• broadcom release automation (<= 4.7.1)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://seclists.org/fulldisclosure/2014/Dec/55 seclists.org
- http://securitytracker.com/id?1031375 securitytracker.com
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx Vendor Advisory
- http://www.kb.cert.org/vuls/id/343060 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/534246/100/0/threaded www.securityfocus.com
- http://seclists.org/fulldisclosure/2014/Dec/55 seclists.org
- http://securitytracker.com/id?1031375 securitytracker.com
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx Vendor Advisory
- http://www.kb.cert.org/vuls/id/343060 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/534246/100/0/threaded www.securityfocus.com