CVE-2014-4661: HP Records Manager

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• HP Records Manager: up to and including 7.3.4; version 8.1 only

Published 2014-10-10. Last modified 2026-06-17.