CVE-2019-6181: Lenovo Xclarity Administrator

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.

Affected products

• Lenovo Xclarity Administrator: before 2.5.0 (fixed in 2.5.0)

Published 2019-09-03. Last modified 2026-06-17.