4.8
Moyenne
CVE-2019-6180 A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to…
Description
A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Administrator (LXCA) 2.5 | premières → < 2.5.0 | 2.5.0 |
Autres CVE de XClarity Administrator (LXCA)
Les 8 CVE de XClarity Administrator (LXCA) →
CVE-2019-19756
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to…
7.9
Élevée
CVE-2019-6194
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions…
5.7
Moyenne
CVE-2019-6193
An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6…
7.5
Élevée
CVE-2019-19757
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM)…
5.4
Moyenne