Stored Cross-Site Scripting Vulnerability in Lenovo XClarity Administrator
CVE-2019-6180
4.8MEDIUM
Key Information:
- Vendor
Lenovo
- Vendor
- CVE Published:
- 3 September 2019
What is CVE-2019-6180?
A stored cross-site scripting vulnerability exists in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0, allowing an administrative user to inject malicious JavaScript code. This code is stored within LXCA and can be executed in the web browsers of other users accessing the application. It poses a risk as the scripted content could potentially compromise user actions and lead to unauthorized access.
Affected Version(s)
XClarity Administrator (LXCA) < 2.5.0