Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Lenovo Subscribe
Filtered by product Thinkagile 7d1h
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-6187 1 Lenovo 42 Thinksystem Sr670, Thinkagile 7d1h, Thinkagile 7x82 and 39 more 2020-08-24 4.0 MEDIUM 6.5 MEDIUM
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server.