CVE-2019-6194CWE-611

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information…

Medium · published February 14, 2020

CVSS v3.1
5.7
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00737 · 54.0th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2020-02-14T17:10Z
EPSS history
Timeline
  • 14 FEB 17:10Z
    An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information…
    cvelistv5