CVE:CVE-2008-6105
CNNVD:CNNVD-200902-190
IBM Workplace for Business Controls and Reporting 是一个针对商业控制和报告的协作应用程序框架。
IBM Workplace for Business Controls and Reporting 2.x版本和IBM Workplace Web Content Management 6.x版本存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量，注入任意的web脚本或HTML。
solution:Upgrade ibm workplace_for_business_controls_and_reporting to a higher version than 2.0,and avoid the version 2.0; Upgrade ibm workplace_web_content_management to a higher version than 6.0,and avoid the version 6.0