CVE:CVE-2012-3250
CNNVD:CNNVD-201208-220
HP Service Manager Server中存在漏洞，可被恶意攻击者利用进行跨站脚本攻击。该漏洞源于Web Tier中的某些未明输入在返回给用户之前未经正确验证。攻击者可利用该漏洞在受影响站点上下文中的用户浏览器会话中执行任意HTML和脚本代码。以下产品中存在漏洞：HP Service Manager Server 9.30、9.21、7.11版本。
solution:Upgrade hp service_center_server to a higher version than 6.2.8,and avoid the version 6.2.8; Upgrade hp service_manager_server to a higher version than 7.11,9.21,9.30,and avoid the version 7.11,9.21,9.30