6.1
Moyenne
CVE-2019-6181 A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior…
Description
A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Administrator (LXCA) 2.5 | premières → < 2.5.0 | 2.5.0 |
Autres CVE de XClarity Administrator (LXCA)
Les 8 CVE de XClarity Administrator (LXCA) →
CVE-2019-19756
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to…
7.9
Élevée
CVE-2019-6194
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions…
5.7
Moyenne
CVE-2019-6193
An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6…
7.5
Élevée
CVE-2019-19757
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM)…
5.4
Moyenne