5.4
Medium
CVE-2019-19757 An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM)…
Description
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) based cross-site scripting vulnerability in versions prior to 2.6.6 that could allow JavaScript code to be executed in the user's web browser if a specially crafted link is visited. The JavaScript code is executed on the user's system, not executed on LXCA itself.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XClarity Administrator (LXCA) 2.6 | earliest → < 2.6.6 | 2.6.6 |
Other CVEs of XClarity Administrator (LXCA)
The 8 CVEs of XClarity Administrator (LXCA) →
CVE-2019-19756
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to…
7.9
High
CVE-2019-6194
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions…
5.7
Medium
CVE-2019-6193
An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6…
7.5
High
CVE-2019-6181
A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior…
6.1
Medium