CVE:CVE-2009-2268
CNNVD:CNNVD-200907-006
Sun Java System Access Manager 6 2005Q1， 7 2005Q4和7.1版本下的Cross-Domain Controller (CDC) servlet存在跨站脚本漏洞，允许远程攻击者借助未知向量注入任意Web脚本或HTML。
solution:Upgrade sun java_system_access_manager to a higher version than 6,6.0_2005q1,7.0,7.0_2005q4,7.1,7_2005q4,and avoid the version 6,6.0_2005q1,7.0,7.0_2005q4,7.1,7_2005q4