CVE:CVE-2010-2049
CNNVD:CNNVD-201005-355
ManageEngine ADAudit Plus的脚本jsp/audit/reports/ExportReport.jsp存在跨站脚本攻击漏洞。远程攻击者可以借助reportList参数注入任意的web脚本和HTML。
solution:Upgrade manageengine adaudit_plus to a higher version than 4.0.0,and avoid the version 4.0.0