CVE:CVE-2007-6312
CNNVD:CNNVD-200712-109
Websense Enterprise和Web Security Suite中的Web Reporting Tools portal的登录页面存在跨站脚本攻击漏洞， 远程攻击者可以借助用户名字段注入任意web脚本或HTML。
solution:Upgrade websense enterpise to a higher version than 6.3,6.3.1,and avoid the version 6.3,6.3.1; Upgrade websense reporting_tools to a higher version than 6.3,6.3.1,and avoid the version 6.3,6.3.1; Upgrade websense web_security_suite to a higher version than 6.3,6.3.1,and avoid the version 6.3,6.3.1