Cross-site scripting in Lenovo System x IMM2 firmware for: x240, Machine Types: 7162…
Priority LOW 29CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Management Module 2), prior to version 5.60, embedded Baseboard Management Controller (BMC) web interface during an internal security review. This vulnerability could allow JavaScript code to be executed in the user's web browser if the user is convinced to visit a crafted URL, possibly through phishing. Successful exploitation requires specific knowledge about the user’s network to be included in the crafted URL. Impact is limited to the normal access restrictions and permissions of the user clicking the crafted URL, and subject to the user being able to connect to and already being authenticated to IMM2 or other systems. The JavaScript code is not executed on IMM2 itself.
Why it matters now
EPSS 0.00641 50th percentileScored 2026-11-07
Fix Fixed System x IMM2 firmware for: x240, Machine Types: 7162, 2588; x440, Machine Type 7167, 2590 ; x3750 M4, Machine Type: 8753 ; x3250 M6, Machine type 3633, 3943 ; nx360 M5, Machine type 5465, 5467 ; x280/x480/x880 X6 , Machine Type 7196, 4258 ; x3850 X6 and x3950 X6, Machine type 6241 ; x3550 M5, Machine Type 5463, 8869 ; x3650 M5, Machine Type 5462, 8871; x3500 M5, Machine Type 5464, 5478 (Lenovo): 5.60System x IMM2 firmware for x240 M5, Machine Types: 9532, 2591 (Lenovo): 5.61+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | System x IMM2 firmware for: x240, Machine Types: 7162, 2588; x440, Machine Type 7167, 2590 ; x3750 M4, Machine Type: 8753 ; x3250 M6, Machine type 3633, 3943 ; nx360 M5, Machine type 5465, 5467 ; x280/x480/x880 X6 , Machine Type 7196, 4258 ; x3850 X6 and x3950 X6, Machine type 6241 ; x3550 M5, Machine Type 5463, 8869 ; x3650 M5, Machine Type 5462, 8871; x3500 M5, Machine Type 5464, 5478 | before 5.60 | 5.60 | Patch available | CNA |
| Lenovo | System x IMM2 firmware for x240 M5, Machine Types: 9532, 2591 | before 5.61 | 5.61 | Patch available | CNA |
| IBM | System x IMM2 firmware | before 5.60 | 5.60 | Patch available | CNA |
- System x IMM2 firmware for: x240, Machine Types: 7162, 2588; x440, Machine Type 7167, 2590 ; x3750 M4, Machine Type: 8753 ; x3250 M6, Machine type 3633, 3943 ; nx360 M5, Machine type 5465, 5467 ; x280/x480/x880 X6 , Machine Type 7196, 4258 ; x3850 X6 and x3950 X6, Machine type 6241 ; x3550 M5, Machine Type 5463, 8869 ; x3650 M5, Machine Type 5462, 8871; x3500 M5, Machine Type 5464, 5478 VendorLenovo Affected before 5.60 Fixed in 5.60 Patch available CNA
- System x IMM2 firmware for x240 M5, Machine Types: 9532, 2591 VendorLenovo Affected before 5.61 Fixed in 5.61 Patch available CNA
- System x IMM2 firmware VendorIBM Affected before 5.60 Fixed in 5.60 Patch available CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:integrated_management_module_2:*:*:*:*:*:*:*:* | before 5.60 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_system_nx360_m5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x280_x6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x3250_m6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x3500_m5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x3550_m5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x3650_m5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x3750_m4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x3850_x6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:integrated_management_module_2:*:*:*:*:*:*:*:* Versions before 5.60 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_system_nx360_m5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x280_x6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x3250_m6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x3500_m5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x3550_m5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x3650_m5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x3750_m4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x3850_x6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:lenovo:flex_system_x3950_x6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x440:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x480_x6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x880_x6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:integrated_management_module_2:*:*:*:*:*:*:*:* | before 5.61 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_system_x240_m5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:h:lenovo:flex_system_x3950_x6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x440:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x480_x6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x880_x6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:integrated_management_module_2:*:*:*:*:*:*:*:* Versions before 5.61 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_system_x240_m5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
- Fix · CNA System x IMM2 firmware for: x240, Machine Types: 7162, 2588; x440, Machine Type 7167, 2590 ; x3750 M4, Machine Type: 8753 ; x3250 M6, Machine type 3633, 3943 ; nx360 M5, Machine type 5465, 5467 ; x280/x480/x880 X6 , Machine Type 7196, 4258 ; x3850 X6 and x3950 X6, Machine type 6241 ; x3550 M5, Machine Type 5463, 8869 ; x3650 M5, Machine Type 5462, 8871; x3500 M5, Machine Type 5464, 5478 (Lenovo) Fixed in 5.60
- Fix · CNA System x IMM2 firmware for x240 M5, Machine Types: 9532, 2591 (Lenovo) Fixed in 5.61
- Fix · CNA System x IMM2 firmware (IBM) Fixed in 5.60
Timeline
- 2026-10-02 Threatist record created from CVE-2020-8340
- 2026-10-03 Alias added: GHSA-6gmj-5hf7-3xr4
- 2026-10-21 EPSS moved to the 50th–90th percentile
References
More Lenovo Integrated Management Module 2 vulnerabilities
- TI-2017-02885 Memory corruption in Lenovo IMM2 CVSS 3.0CRITICAL 9.8
Sources
- CVE-2020-8340 · CVE Program
- CVE-2020-8340 · NVD
- FIRST EPSS
- GHSA-6gmj-5hf7-3xr4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences