CVE-2014-0362

Name of the Vulnerable Software and Affected Versions Google Search Appliance (GSA) versions prior to 7.0.14.G.216 Google Search Appliance (GSA) version 7.2 prior to 7.2.0.G.114

Description A cross-site scripting (XSS) issue exists when dynamic navigation is configured, allowing remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element.

Recommendations For Google Search Appliance (GSA) versions prior to 7.0.14.G.216, update to version 7.0.14.G.216 or later. For Google Search Appliance (GSA) version 7.2 prior to 7.2.0.G.114, update to version 7.2.0.G.114 or later.