CVE:CVE-2010-4322
CNNVD:CNNVD-201101-070
Novell Vibe OnPrem 3 BETA版本中的gwtTeaming.rpc文件中存在跨站脚本攻击漏洞。远程认证用户可以借助Micro Blog(又名What Are You Working On?)域注入任意web脚本或者HTML。
solution:Upgrade novell vibe_onprem to a higher version than 3:beta,and avoid the version 3:beta