CVE:CVE-2010-3291
CNNVD:CNNVD-201010-339
HP AssetCenter/AssetManager 是生命周期资产管理软件。
HP AssetCenter 5.0x至AC_5.03版本，AssetManager 5.1x至AM_5.12版本以及5.2x至AM_5.22版本中存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量注入任意web脚本或HTML。
solution:Upgrade hp assetcenter to a higher version than 5.0,ac_5.03,and avoid the version 5.0,ac_5.03; Upgrade hp assetmanager to a higher version than 5.1,5.2,am_5.12,am_5.22,and avoid the version 5.1,5.2,am_5.12,am_5.22