CVE:CVE-2010-4322
CNNVD:CNNVD-201101-070
Novell Vibe OnPrem 3 BETA版本中的gwtTeaming.rpc文件中存在跨站脚本攻击漏洞。远程认证用户可以借助Micro Blog(又名What Are You Working On?)域注入任意web脚本或者HTML。
solution:Upgrade novell vibe_onprem to a higher version than 3:beta,and avoid the version 3:beta
solution:Upgrade ibm tivoli_directory_server to a higher version than 6.0.0.0,6.0.0.1,6.0.0.7,6.0.0.8,6.0.0.14,6.0.0.19,6.0.0.33,6.0.0.41,6.0.0.45,6.0.0.52,6.0.0.53,6.0.0.54,6.0.0.55,6.0.0.56,6.0.0.57,6.0.0.58,6.0.0.59,6.0.0.60,6.0.0.61,6.0.0.62,6.0.0.63,6.0.0.64,6.1.0.0,6.1.0.5,and avoid the version 6.0.0.0,6.0.0.1,6.0.0.7,6.0.0.8,6.0.0.14,6.0.0.19,6.0.0.33,6.0.0.41,6.0.0.45,6.0.0.52,6.0.0.53,6.0.0.54,6.0.0.55,6.0.0.56,6.0.0.57,6.0.0.58,6.0.0.59,6.0.0.60,6.0.0.61,6.0.0.62,6.0.0.63,6.0.0.64,6.1.0.0,6.1.0.5