CVE:CVE-2007-0110
CNNVD:CNNVD-200701-058
Novell Access Manager Identity Server 3.0.0-1013之前版本中的nidp/idff/sso存在跨站脚本攻击漏洞。远程攻击者可以借助IssueInstant参数，注入任意的web脚本或HTML。该漏洞未能在出错信息中得到正确处理。
solution:Upgrade novell access_manager_identity_server to a higher version than 3,and avoid the version (,3]