CVE:CVE-2012-1064
CNNVD:CNNVD-201302-120
EMC RSA Archer SmartSuite Framework 4.x版本以及RSA Archer GRC 5.2SP1之前的5.x版本中存在跨站脚本漏洞。远程攻击者可通过未明向量利用该漏洞注入任意网页脚本或HTML代码。
solution:Upgrade emc rsa_archer_smartsuite to a higher version than 4.3,4.5,and avoid the version 4.3,4.5; Upgrade emc rsa_archer_egrc to a higher version than 5.0,5.1,5.2,and avoid the version 5.0,5.1,5.2