CVE-2019-6182 - CVE House
Back to Database
Status published Medium CVE-2019-6182

A stored CSV Injection vulnerability was reported in Lenovo XClarity...

Vulnerability Description

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-6182

Credits & Attribution

No credits recorded in the NVD database.

References

More from Lenovo

View All →
CVE-2025-9548
A potential null pointer dereference vulnerability was reported in the...
Medium 6.8
CVE-2025-9319
A potential vulnerability was reported in the Lenovo Wallpaper Client...
High 7.5
CVE-2025-9214
A missing authentication vulnerability was reported in some Lenovo printers...
Medium 5.3
CVE-2025-9201
A potential DLL hijacking vulnerability was discovered in Lenovo Browser...
High 8.5
CVE-2025-8557
An internal product security audit of Lenovo XClarity Orchestrator (LXCO)...
High 8.7

Affected Vendor

Affected Software

XClarity Administrator (LXCA)
Vulnerable Versions:
unspecified

Timeline

Official Publish: September 3rd, 2019
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.