CVE-2019-6187
Estado: ModificadaMedia (6.5)—
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.86%
- Percentil entre todas las CVEs puntuadas: 57
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-1236
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-6187",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@lenovo.com",
"affectedData": [
{
"vendor": "Lenovo",
"product": "Lenovo XClarity Controller (XCC)",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "TEI392M",
"versionType": "custom"
},
{
"status": "affected",
"version": "unspecified",
"lessThan": "CDI340M",
"versionType": "custom"
},
{
"status": "affected",
"version": "unspecified",
"lessThan": "G1I312",
"versionType": "custom"
},
{
"status": "affected",
"version": "unspecified",
"lessThan": "PSI328M",
"versionType": "custom"
}
]
}
]
}
],
"published": "2019-11-20T02:15:10.787",
"references": [
{
"url": "https://support.lenovo.com/solutions/LEN-29118",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@lenovo.com"
},
{
"url": "https://support.lenovo.com/solutions/LEN-29118",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-1236"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server."
},
{
"lang": "es",
"value": "Se reportó una vulnerabilidad de inyección CSV almacenada en Lenovo XClarity Controller (XCC) lo que podría permitir a un usuario administrativo u otro usuario con permiso apropiado almacenar datos malformados en determinados campos informativos del servidor de XCC, que podría resultar en que las fórmulas especialmente diseñadas sean almacenadas en un archivo CSV exportado. La fórmula especialmente diseñada no es ejecutada en XCC y no tiene ningún efecto en el servidor."
}
],
"lastModified": "2026-06-17T02:38:45.683",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DEA7654-0593-4CEA-9040-078D4801C871",
"versionEndExcluding": "tei392m"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7x82:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6C022FCB-ECB4-4E33-84E9-28E97AF1C21F"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y11:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3A1B8C35-DF16-4D29-AF9E-01339AC9BED4"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y12:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "99BA98D3-E3A9-49A0-9B0E-967B9126675B"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y88:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D51EBEBE-ADB7-48C3-9848-E3203333F2FE"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y92:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E914E260-382D-4CD0-BCE1-D960DAA30E05"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7z03:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B8279AC5-03B1-44D6-8C9B-989F2C281641"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2588DA2E-6E58-4FA2-9AA6-FC669C042197"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5DB64709-93BA-43D8-A1DB-4CE405291430"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1DB0C393-2CB4-485F-93E2-2F28B19F9325"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C6334030-07E4-45F4-A233-4A37F77FC573"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D94182EE-10FE-4506-BDE0-06F4140923FC"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C5B52AC1-714E-4217-8599-80D99E0D33B3"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DB19D273-4975-4957-AE94-117B607CD746"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "19771143-D5F1-4F2F-AB83-09913894681E"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EAF08144-ECCB-477B-A934-E4578522BFEE"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "089F97B1-FEDE-4A5D-91D3-0517E8D39174"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C03E8D97-6337-4E22-8125-8CED65281D5C",
"versionEndExcluding": "cdi340m"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7d1h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0BCA03A8-09C3-47A3-9715-D869B848771B"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7x83:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D84E8645-BDEA-4DBD-972B-FFEEBD6EEA85"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y13:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B39D9ADA-4F3C-43A6-902F-E6626BC692F9"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y14:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7FB46A9B-16D9-4D4C-9BE1-813452C51C11"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y90:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "31DAB6CE-B360-489B-93DF-F98C4DE85DFE"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y93:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "634E0104-AD3D-48A3-B0E0-A74C15FAACC7"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7y94:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B0B0F1CD-A017-4C20-AEB9-F80BA7FF304B"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7z04:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "871F4EE6-3E47-499E-9650-47AB35EBBD9E"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7z05:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "29D7C95C-F43D-4A1A-BD8B-5F40D8003477"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7z06:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "792A1744-DFC1-420D-BFD5-60AE54DA54CC"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7z07:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6F814B1C-E4E4-48BA-92C4-39B7997B51F4"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_7z20:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "40516AAC-4F19-4AE8-9C0B-0697D36FB0F9"
},
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_yx84:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6876F1AA-3196-4576-B8F4-202266DA64EF"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F4C6628A-8A99-4841-A7C5-0445A03C638D"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D10850BF-A7EA-4B84-B2EF-66DCCC301514"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A3DC615C-A88A-4C45-892F-77C5E84104E8"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A5B19107-5B45-4E45-8B34-90B5A1FF3962"
},
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_st558:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "30CFA6D5-7D07-4BFF-8AD2-DE591EDE0186"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D93ED5C3-F8AF-4793-8CD5-2795EDE1CC04",
"versionEndExcluding": "g1i312"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:_thinksystem_sr670:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "158A1ED4-96CD-4F8B-B607-6AC5AF12E057"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB970505-71D1-4802-8D9F-6D81A4024470",
"versionEndExcluding": "psi328m"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B6B0407D-D603-48AE-9A42-F4C68056E19D"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@lenovo.com"
}