CVE:CVE-2015-2420
CNNVD:CNNVD-201508-164
Microsoft System Center Operations Manager是美国微软（Microsoft）公司的一套用于实现对IT环境有效监控和管理的架构，它提供运行状况、性能信息视图，以及根据可用性、性能、配置或安全状况生成警报。
Microsoft System Center Operations Manager中存在跨站脚本漏洞，该漏洞源于程序没有正确验证输入。成功利用此漏洞的攻击者可以在用户的浏览器中注入客户端脚本。以下版本受到影响：Microsoft System Center 2012 Operations Manager Gold before Rollup 8，Rollup 10之前SP1，Rollup 7之前R2。
solution:Upgrade microsoft system_center_operations_manager to a higher version than 2012:r2_rollup1,2012:r2_rollup2,2012:r2_rollup3,2012:r2_rollup4,2012:r2_rollup5,2012:r2_rollup6,2012:rollup1,2012:rollup2,2012:rollup3,2012:rollup4,2012:rollup5,2012:rollup6,2012:rollup7,2012:sp1_rollup1,2012:sp1_rollup2,2012:sp1_rollup3,2012:sp1_rollup4,2012:sp1_rollup5,2012:sp1_rollup6,2012:sp1_rollup7,2012:sp1_rollup8,2012:sp1_rollup9,and avoid the version 2012:r2_rollup1,2012:r2_rollup2,2012:r2_rollup3,2012:r2_rollup4,2012:r2_rollup5,2012:r2_rollup6,2012:rollup1,2012:rollup2,2012:rollup3,2012:rollup4,2012:rollup5,2012:rollup6,2012:rollup7,2012:sp1_rollup1,2012:sp1_rollup2,2012:sp1_rollup3,2012:sp1_rollup4,2012:sp1_rollup5,2012:sp1_rollup6,2012:sp1_rollup7,2012:sp1_rollup8,2012:sp1_rollup9