CVE:CVE-2004-0672
CNNVD:CNNVD-200408-104
Netegrity IdentityMinder Web Edition 5.6版本中的主要管理web界面存在多个跨站脚本(XSS)漏洞。远程攻击者可以和其他用户一样通过（1）numOfExpressions参数中用00％启动的脚本或者（2）mobjtype参数来执行脚本。
solution:Upgrade netegrity identityminder to a higher version than web_5.6,web_5.6_sp1,web_5.6_sp2,and avoid the version web_5.6,web_5.6_sp1,web_5.6_sp2; Upgrade netegrity policy_server to a higher version than 5.5,and avoid the version 5.5