CVE:CVE-2005-2186
CNNVD:CNNVD-200507-087
McAfee IntruShield Security Management System是McAfee入侵防护设备管理软件。
IntruShield Security Management System中存在多个跨站脚本攻击漏洞。
远程认证用户可通过SystemEvent.jsp的thirdMenuName或resourceName参数注入任意Web脚本或HTML。
solution:Upgrade mcafee intrushield_security_management_system to a higher version than *