CVE-2019-6194

MEDIUM

Lenovo XClarity Administrator < 2.6.6 - XML External Entity Injection

Title source: llm

Description

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.lenovo.com/us/en/product_security/LEN-29477

Scores

CVSS v3 5.7

EPSS 0.0025

EPSS Percentile 48.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-611

Status published

Products (1)

lenovo/xclarity_administrator < 2.6.6

Published Feb 14, 2020

Tracked Since Feb 18, 2026