Description
Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
References
- 44482 third-party-advisory
- 1025518 vdb-entry
- 8252 third-party-advisory
- 20110510 CA20110510-01: Security Notice for CA eHealth mailing-list
- 47795 vdb-entry
- ehealth-unspecified-xss(67389) vdb-entry
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B5662845D-4CD7-4CE6-8829-4F07A4C67366%7D