CVE:CVE-2017-8005
CNNVD:CNNVD-201707-621
EMC RSA Identity Governance and Lifecycle、RSA Via Lifecycle and Governance和RSA Identity Management and Governance都是美国易安信（EMC）公司的产品。EMC RSA Identity Governance and Lifecycle是一套生命周期管理解决方案；EMC RSA Identity Management and Governance（IMG）是一套企业级身份识别和管理解决方案；EMC RSA Via Lifecycle and Governance是一套生命周期管理和身份识别解决方案。
多款RSA产品存在跨站脚本漏洞。远程攻击者可利用该漏洞向应用程序注入任意的HTML代码。以下产品和版本受到影响：RSA Identity Governance and Lifecycle 7.0.1版本，7.0.2版本；RSA Via Lifecycle and Governance 7.0版本；RSA Identity Management and Governance (RSA IMG) 6.9.1版本。
solution:Upgrade emc rsa_identity_governance_and_lifecycle to a higher version than 7.0.1,7.0.1.1,7.0.1.2,7.0.1.3,7.0.2,7.0.2.1,and avoid the version 7.0.1,7.0.1.1,7.0.1.2,7.0.1.3,7.0.2,7.0.2.1; Upgrade emc rsa_identity_management_and_governance to a higher version than 6.9.1,6.9.1.1,6.9.1.2,6.9.1.3,6.9.1.4,6.9.1.5,6.9.1.6,6.9.1.7,6.9.1.8,6.9.1.9,6.9.1.10,6.9.1.11,6.9.1.12,6.9.1.13,6.9.1.14,6.9.1.15,6.9.1.16,6.9.1.17,6.9.1.18,6.9.1.19,6.9.1.20,6.9.1.21,6.9.1.22,6.9.1.23,6.9.1.24,and avoid the version 6.9.1,6.9.1.1,6.9.1.2,6.9.1.3,6.9.1.4,6.9.1.5,6.9.1.6,6.9.1.7,6.9.1.8,6.9.1.9,6.9.1.10,6.9.1.11,6.9.1.12,6.9.1.13,6.9.1.14,6.9.1.15,6.9.1.16,6.9.1.17,6.9.1.18,6.9.1.19,6.9.1.20,6.9.1.21,6.9.1.22,6.9.1.23,6.9.1.24; Upgrade rsa rsa_via_lifecycle_and_governance to a higher version than 7.0,7.0.0.1,7.0.0.2,7.0.0.3,7.0.0.4,7.0.0.5,and avoid the version 7.0,7.0.0.1,7.0.0.2,7.0.0.3,7.0.0.4,7.0.0.5