CVE:CVE-2021-38961
CNNVD:CNNVD-202112-2622
Ibm IBM OPENBMC OP910是美国国际商用机器公司（Ibm）公司的一个 POWER8 和 POWER9 模拟器。
IBM OPENBMC OP910 存在跨站脚本漏洞，该漏洞源于允许用户在 Web UI 中嵌入任意 JavaScript 代码，从而改变预期功能，可能导致可信会话中的凭据泄露。
solution:Upgrade ibm power_system_ac922_(8335-gtg)_firmware to a higher version than op910,and avoid the version op910; Upgrade ibm power_system_ac922_(8335-gtc)_firmware to a higher version than op910,and avoid the version op910; Upgrade ibm power_system_ac922_(8335-gtw)_firmware to a higher version than op910,and avoid the version op910