CVE-2019-6182medium

CVE-2019-6182: medium-severity vulnerability in Lenovo XClarity Administrator (LXCA)

Published · Updated

Follow this CVE+ Monitor XClarity Administrator

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.8epss 0.7%
A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Affected products
Lenovo · XClarity Administrator (LXCA)
Related CVEs — Lenovo XClarity Administrator (LXCA)

In the same product, most dangerous first.

CVE-2019-6179MEDIUMCVE-2019-6179EPSS 1.4%CVE-2019-6193HIGHCVE-2019-6193EPSS 1.0%CVE-2019-6181MEDIUMCVE-2019-6181EPSS 0.8%CVE-2019-6194MEDIUMCVE-2019-6194EPSS 0.7%CVE-2019-6180MEDIUMCVE-2019-6180EPSS 0.7%CVE-2019-19757MEDIUMCVE-2019-19757EPSS 0.5%