CVE:CVE-2018-1795
CNNVD:CNNVD-201810-172
IBM Robotic Process Automation with Automation Anywhere Enterprise是美国IBM公司和Automation Anywhere共同开发的一套流程自动化解决方案。
IBM Robotic Process Automation with Automation Anywhere Enterprise 10版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞向Web UI中注入任意的JavaScript代码。
solution:Upgrade ibm robotic_process_automation_with_automation_anywhere to a higher version than 10.0,and avoid the version 10.0