CVE-2019-6187: vulnerability in Lenovo XClarity Controller (XCC)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server.
Affected products
Lenovo · Lenovo XClarity Controller (XCC)Related CVEs — Lenovo XClarity Controller (XCC)
In the same product, most dangerous first.