CVE:CVE-2008-5095
CNNVD:CNNVD-200811-241
Novell User Application 和Identity Manager Roles Based Provisioning模块中存在跨站脚本攻击漏洞。远程攻击者可以借助未知向量，注入任意的web脚本或HTML。
solution:Upgrade novell identity_manager_roles_based_provisioning_module to a higher version than 3.6.0,3.6.1,and avoid the version 3.6.0,3.6.1; Upgrade novell user_application to a higher version than 3.0.1,3.5.0,3.5.1,and avoid the version 3.0.1,3.5.0,3.5.1