VULNERABILITY INTELLIGENCE
CVE-2019-6179
CVSS score7.5 HIGH
EPSS probability1.36%
CISA KEVNot currently listed
Published2019-09-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.
Weakness classification
- nvd@nist.gov: CWE-611
Primary references
- psirt@lenovo.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory