CVE-2019-6187

MEDIUM

6.5

CVSS Score

Published: November 20, 2019 at 01:31 AM UTC

Updated: June 17, 2026 at 02:38 AM UTC

42 products affected across 1 vendorXClarity ControllerThinkSystem SR250ThinkSystem SR630

Using Lenovo XClarity Controller (XCC) by Lenovo?

Get instant alerts when new vulnerabilities affect Lenovo XClarity Controller (XCC) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.9%

Description

A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

XClarity Controller · Lenovo

95%

v < CDI340Mv < G1I312v < PSI328Mv < TEI392Mv < cdi340mv < g1i312v < psi328mv < tei392m

Affected range stops below cdi340m, so it looks safe — our inference, not a vendor statement

Affected range stops below g1i312, so it looks safe — our inference, not a vendor statement

Affected range stops below psi328m, so it looks safe — our inference, not a vendor statement

Affected range stops below tei392m, so it looks safe — our inference, not a vendor statement

lenovo-thinkagile-7d1h (environment) · lenovo-thinkagile-7x82 (environment) · lenovo-thinkagile-7x83 (environment) · lenovo-thinkagile-7y11 (environment) · lenovo-thinkagile-7y12 (environment) · lenovo-thinkagile-7y13 (environment) · lenovo-thinkagile-7y14 (environment) · lenovo-thinkagile-7y88 (environment) · lenovo-thinkagile-7y90 (environment) · lenovo-thinkagile-7y92 (environment) · lenovo-thinkagile-7y93 (environment) · lenovo-thinkagile-7y94 (environment) · lenovo-thinkagile-7z03 (environment) · lenovo-thinkagile-7z04 (environment) · lenovo-thinkagile-7z05 (environment) · lenovo-thinkagile-7z06 (environment) · lenovo-thinkagile-7z07 (environment) · lenovo-thinkagile-7z20 (environment) · lenovo-thinkagile-yx84 (environment) · lenovo-thinksystem-sd530 (environment) · lenovo-thinksystem-sd650 (environment) · lenovo-thinksystem-sn550 (environment) · lenovo-thinksystem-sn850 (environment) · lenovo-thinksystem-sr150 (environment) · lenovo-thinksystem-sr158 (environment) · lenovo-thinksystem-sr250 (environment) · lenovo-thinksystem-sr258 (environment) · lenovo-thinksystem-sr530 (environment) · lenovo-thinksystem-sr550 (environment) · lenovo-thinksystem-sr570 (environment) · lenovo-thinksystem-sr590 (environment) · lenovo-thinksystem-sr630 (environment) · lenovo-thinksystem-sr650 (environment) · lenovo-thinksystem-sr670 (environment) · lenovo-thinksystem-sr850 (environment) · lenovo-thinksystem-sr860 (environment) · lenovo-thinksystem-sr950 (environment) · lenovo-thinksystem-st250 (environment) · lenovo-thinksystem-st258 (environment) · lenovo-thinksystem-st550 (environment) · lenovo-thinksystem-st558 (environment)

Thinkagile 7D1H · Lenovodevice

80%

All versions

Thinkagile 7X82 · Lenovodevice

80%

All versions

Thinkagile 7X83 · Lenovodevice

80%

All versions

Thinkagile 7Y11 · Lenovodevice

80%

All versions