CVE-2019-6180 is a vulnerability in Lenovo Xclarity Administrator
Published on September 3, 2019
A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Products Associated with CVE-2019-6180
Want to know whenever a new CVE is published for Lenovo Xclarity Administrator? stack.watch will email you.
Affected Versions
Lenovo XClarity Administrator (LXCA):- Version unspecified and below 2.5.0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.