VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Sep 3, 2019· Updated Jun 17, 2026

CVE-2019-6182

CVE-2019-6182

Description

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.

Affected products

3
  • Lenovo/Xclarity Administrator3 versions
    cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*range: <2.5.0
    • (no CPE)range: <2.5.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.