4.8
Medium
CVE-2019-6182 A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that…
Description
A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XClarity Administrator (LXCA) 2.5 | earliest → < 2.5.0 | 2.5.0 |
Other CVEs of XClarity Administrator (LXCA)
The 8 CVEs of XClarity Administrator (LXCA) →
CVE-2019-19756
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to…
7.9
High
CVE-2019-6194
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions…
5.7
Medium
CVE-2019-6193
An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6…
7.5
High
CVE-2019-19757
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM)…
5.4
Medium