VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Sep 3, 2019· Updated Jun 17, 2026

CVE-2019-6180

CVE-2019-6180

Description

A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.

Affected products

3
  • Lenovo/Xclarity Administrator3 versions
    cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*range: <2.5.0
    • (no CPE)range: <2.5.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.