CVE-2019-6187: lenovo lenovo xclarity controller (xcc)
Vulnerability summary
CVE-2019-6187 is a medium (CVSS 6.5) vulnerability in lenovo lenovo xclarity controller (xcc). EPSS estimates a 0.86% chance of exploitation in the next 30 days, higher than 57.8% of scored vulnerabilities.
Timeline
- 20-11-2019PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.86%
Chance of exploitation in the next 30 days
Percentile
58%
Versus all other CVEs
30-day change
0.00 pp
From 0.86% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Lenovo2 products
- lenovo xclarity controller (xcc)≥ unspecified, < TEI392M | ≥ unspecified, < CDI340M | ≥ unspecified, < G1I312 | ≥ unspecified, < PSI328M
- xclarity_controller< tei392m | < cdi340m | < g1i312 | < psi328m
1 vendor · 2 products