CVE:CVE-2021-35043
CNNVD:CNNVD-202107-1281
OWASP AntiSamy是美国OWASP（Owasp）基金会的一个用于HTML和CSS编码的库。
OWASP AntiSamy存在安全漏洞，该漏洞允许在使用HTML输出序列化器时通过HTML属性进行XSS。
solution:Upgrade antisamy_project antisamy to a higher version than 1.6.4,and avoid the version (,1.6.4); Upgrade oracle retail_back_office to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_central_office to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_returns_management to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle banking_enterprise_default_management to a higher version than 2.6.2,2.7.0,2.7.1,2.10.0,2.12.0,and avoid the version 2.6.2,2.7.0,2.7.1,2.10.0,2.12.0; Upgrade oracle banking_enterprise_default_managment to a higher version than 2.4.0,and avoid the version [2.3.0,2.4.0]; Upgrade oracle banking_party_management to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade oracle banking_platform to a higher version than 2.4.1,2.6.2,2.7.0,2.7.1,and avoid the version [2.3.0,2.4.1],2.6.2,2.7.0,2.7.1; Upgrade oracle insurance_policy_administration to a higher version than 11.0.2,11.1.0,11.2.8,11.3.0,11.3.1,and avoid the version 11.0.2,11.1.0,11.2.8,11.3.0,11.3.1; Upgrade oracle middleware_common_libraries_and_tools to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade netapp active_iq_unified_manager to a higher version than -