Unscored CVE-2014-8247 EUVD-2014-8088GHSA-52r3-m642-mp2f

Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote a…

Published Dec 16, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx
20141216 CA20141215-01: Security Notice for CA LISA Release Automation mailing-list
VU#343060 third-party-advisory
20141215 CA20141215-01: Security Notice for CA LISA Release Automation mailing-list
1031375 vdb-entry