CVE:CVE-2013-4653
CNNVD:CNNVD-201307-094
Alcatel-Lucent OmniTouch是法国阿尔卡特-朗讯（Alcatel-Lucent）公司的一套统一通信解决方案。该解决方案支持智能电话、无线网络技术等。
Alcatel-Lucent Omnitouch 8660 My Teamwork 6.7之前版本，Omnitouch 8670 Automated Message Delivery System (AMDS) 6.7之前版本，Omnitouch 8460 Advanced Communication Server 9.1之前版本，OmniTouch 8400 Instant Communications Suite before 6.7.3 (1)中的MyTeamwork服务中的ics的登陆功能中存在多个跨站脚本漏洞。远程攻击者可通过能够导致反射式XSS的特制URL，利用该漏洞注入任意网页脚本或HTML代码；用户协助的远程攻击者可通过能够使用未明向量导致存储式XSS的用户个人书签项，利用该漏洞注入任意网页脚本或HTML代码。
solution:Upgrade alcatel-lucent omnitouch_8400_instant_communications_suite to a higher version than 6.7.2,and avoid the version (,6.7.2]; Upgrade alcatel-lucent omnitouch_8460_advanced_communication_server to a higher version than 9.0,and avoid the version (,9.0]; Upgrade alcatel-lucent omnitouch_8660_my_teamwork to a higher version than 6.6,and avoid the version (,6.6]; Upgrade alcatel-lucent omnitouch_8670_automated_delivery_message_delivery_system to a higher version than 6.6,and avoid the version (,6.6]