CVE:CVE-2011-0770
CNNVD:CNNVD-201107-214
HP ArcSight Connector Appliance 6.1之前版本中存在跨站脚本攻击漏洞。当导入报表时，借助“Microsoft OS Version”向Windows Event Log SmartConnector传递的输入在使用之前没有经过正确过滤，远程攻击者可借助文件中的Windows XP变量注入任意HTML和脚本代码，当浏览恶意数据时，这些代码就会在受影响站点上下文的用户浏览器会话中得到执行。
solution:Upgrade hp windows_event_log_smartconnector to a higher version than 6.0.0.60023.2,and avoid the version (,6.0.0.60023.2]; Upgrade hp arcsight_c1000_appliance to a higher version than *; Upgrade hp arcsight_c1300_appliance to a higher version than *; Upgrade hp arcsight_c3200_appliance to a higher version than *; Upgrade hp arcsight_c3400_appliance to a higher version than *; Upgrade hp arcsight_c5200_appliance to a higher version than *; Upgrade hp arcsight_c5400_appliance to a higher version than *