Technical Information

Brief overview of the risk:
The vulnerability is a cross-site scripting (XSS) vulnerability that could allow elevation of privilege, enabling an attacker to execute arbitrary commands on the site in the context of the target user.
Detailed Information on the risk:
A reflected XSS vulnerability exists in Remote Desktop Web Access that could allow an attacker to inject a client-side script into the user’s instance of Internet Explorer. This script could spoof content, disclose information, or take any action that the user could take on the Remote Desktop Web Access site.Further information on this exploit is available at : MS11-061