CVE:CVE-2011-4171
CNNVD:CNNVD-201110-582
IBM WebSphere ILOG Rule Team Server 7.1.1版本的content/error.jsp中存在跨站脚本攻击漏洞。远程攻击者可借助teamserver/faces/home.jsp中的project参数注入任意web脚本或者HTML。
solution:Upgrade ibm websphere_ilog_rule_team_server to a higher version than 7.1.1,and avoid the version 7.1.1