Description
A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Lenovo | XClarity Administrator (LXCA) | affected |
|
No data.
No data available yet.
Remediation
Vendor Solution
Update your LXCA installation to version 2.5.0 or later.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2019-15747 | A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself. |
References
| Link | Providers |
|---|---|
| https://support.lenovo.com/solutions/LEN-27805 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: lenovo
Published:
Updated: 2024-09-17T02:52:15.667Z
Reserved: 2019-01-11T00:00:00.000Z
Link: CVE-2019-6180
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-09-03T19:15:10.710
Modified: 2024-11-21T04:46:06.863
Link: CVE-2019-6180
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses