Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters...