CVE:CVE-2014-4189
CNNVD:CNNVD-201406-355
Hitachi Tuning Manager和JP1/Performance Management - Manager Web Option都是日本日立（Hitachi）公司的可对Hitachi存储系统进行性能监控的产品。
Hitachi Tuning Manager 7.6.1-06之前的版本和8.0.0-04之前的8.x版本和JP1/Performance Management - Manager Web Option 07-00至07-54版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade hitachi jp1/performance_management-manager_web_option to a higher version than 07-00,07-54,and avoid the version 07-00,07-54; Upgrade hitachi tuning_manager to a higher version than 6.0.0,7.1.0,7.6.1,7.6.1:05,8.0.0,8.0.0:03,and avoid the version 6.0.0,7.1.0,7.6.1,7.6.1:05,8.0.0,8.0.0:03