Xclarity Administrator (Lxca)
Approved changes feed: RSS · Atom
cpe:2.3:a:lenovo:xclarity_administrator_(lxca):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | Xclarity Administrator (Lxca) (c23fcaa5-36ba-5512-8a54-f6eb0dd3f831) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-6194 |
vulnerable | 2026-06-08 05:14:10.298165 |
Details available
MEDIUM (5.7)
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.
Published: 2020-02-14T17:10:27.142Z
Updated: 2024-09-17T03:12:43.770Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6193 |
vulnerable | 2026-06-08 05:14:10.297744 |
Details available
HIGH (7.5)
An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes.
Published: 2020-02-14T17:10:26.717Z
Updated: 2024-09-17T02:47:43.822Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6182 |
vulnerable | 2026-06-08 05:14:09.942536 |
Details available
MEDIUM (4.8)
A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.
Published: 2019-09-03T18:50:11.119Z
Updated: 2024-09-17T02:11:43.067Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6181 |
vulnerable | 2026-06-08 05:14:09.942091 |
Details available
MEDIUM (6.1)
A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Published: 2019-09-03T18:50:11.062Z
Updated: 2024-09-17T01:21:39.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6180 |
vulnerable | 2026-06-08 05:14:09.941559 |
Details available
MEDIUM (4.8)
A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Published: 2019-09-03T18:50:11.005Z
Updated: 2024-09-17T02:52:15.667Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6179 |
vulnerable | 2026-06-08 05:14:09.937367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19757 |
vulnerable | 2026-06-08 05:13:23.536333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19756 |
vulnerable | 2026-06-08 05:13:23.534901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.