Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Lenovo XClarity Administrator (LXCA) 2.6.6 Clear all filters
TI-2019-04393 CVE-2019-6194 · GHSA-ccgr-hfcp-wj34

XML external entity injection in Lenovo XClarity Administrator

Priority LOW 27

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00737 Published 2020-02-14 Fixed in 2.6.6 CWE-611
TI-2019-04392 CVE-2019-6193 · GHSA-3mv5-rjm2-qwx6

Improper access control in Lenovo XClarity Administrator

Priority LOW 35

An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, licens…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01033 Published 2020-02-14 Fixed in 2.6.6 CWE-284
TI-2019-14240 CVE-2019-19757 · GHSA-gv24-vhxm-xr5j

Cross-site scripting in Lenovo XClarity Administrator

Priority LOW 25

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) based cross-site scripting vulnerability in versions prior to 2.6.6 that could allow JavaScript code to…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2020-02-14 Fixed in 2.6.6 CWE-79