CVE-2019-6181

A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.

Score

CVSS 3.1 6.1 Medium

Status

Modified - psirt@lenovo.com

Published

2019-09-03

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Xclarity Administrator (Lenovo)
• Xclarity Administrator Lxca (Lenovo)

References

• https://support.lenovo.com/solutions/LEN-27805