CVE:CVE-2013-0936
CNNVD:CNNVD-201303-581
EMC Smarts是EMC公司退出的IT管理软件产品线。
EMC Smarts IP Manager，Smarts Service Assurance Manager，Smarts Server Manager，Smarts VoIP Availability Manager，Smarts Network Protocol Manager，Smarts MPLS Manager 9.2之前版本中存在跨站脚本漏洞。通过特制的URL，远程攻击者利用该漏洞注入任意web脚本或HTML。
solution:Upgrade emc smarts_ip_manager to a higher version than 9.1,and avoid the version 9.1; Upgrade emc smarts_mpls_manager to a higher version than 9.1,and avoid the version 9.1; Upgrade emc smarts_network_protocol_manager to a higher version than 9.1,and avoid the version 9.1; Upgrade emc smarts_server_manager to a higher version than 9.1,and avoid the version 9.1; Upgrade emc smarts_services_assurance_manager to a higher version than 9.1,and avoid the version 9.1; Upgrade emc smarts_voip_availability_manager to a higher version than 9.1,and avoid the version 9.1