Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Lenovo XClarity Administrator (LXCA) 2.5.0 Clear all filters
TI-2019-04382 CVE-2019-6182 · GHSA-3v5g-248q-q8gh

CSV injection in Lenovo XClarity Administrator

Priority LOW 23

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that coul…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0065 Published 2019-09-03 Fixed in 2.5.0 CWE-1236
TI-2019-04381 CVE-2019-6181 · GHSA-5gvq-f83g-mrc6

Cross-site scripting in Lenovo XClarity Administrator

Priority LOW 29

A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00823 Published 2019-09-03 Fixed in 2.5.0 CWE-79
TI-2019-04380 CVE-2019-6180 · GHSA-pwj3-9jf6-77cr

Cross-site scripting in Lenovo XClarity Administrator

Priority LOW 23

A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which m…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0065 Published 2019-09-03 Fixed in 2.5.0 CWE-79
TI-2019-04379 CVE-2019-6179 · GHSA-m7jw-5wwc-gxwh

XML external entity injection in Lenovo XClarity Administrator

Priority LOW 36

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, an…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01358 Published 2019-09-03 Fixed in 2.5.0, 7.7.0 +1 CWE-611