CVE-2019-0130

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.
Configurations

Configuration 1 (hide)

cpe:2.3:a:intel:rapid_storage_technology_enterprise:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:lenovo:thinkstation_p520_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p520:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:lenovo:thinkstation_p520c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p520c:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:lenovo:thinkstation_p720_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p720:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:lenovo:thinkstation_p920_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*

History

02 Mar 2023, 16:15

Type Values Removed Values Added
CPE cpe:2.3:o:lenovo:thinkstation_p520c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p520c:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p520:-:*:*:*:*:*:*:*
cpe:2.3:o:lenovo:thinkstation_p520_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p720:-:*:*:*:*:*:*:*
cpe:2.3:o:lenovo:thinkstation_p920_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*
cpe:2.3:o:lenovo:thinkstation_p720_firmware:-:*:*:*:*:*:*:*
References (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html - (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html - Patch, Vendor Advisory
References (BID) http://www.securityfocus.com/bid/108775 - (BID) http://www.securityfocus.com/bid/108775 - Broken Link, Third Party Advisory, VDB Entry
References (CONFIRM) https://support.lenovo.com/us/en/product_security/LEN-27843 - (CONFIRM) https://support.lenovo.com/us/en/product_security/LEN-27843 - Third Party Advisory
First Time Lenovo thinkstation P520
Lenovo thinkstation P520 Firmware
Lenovo
Lenovo thinkstation P920
Lenovo thinkstation P920 Firmware
Lenovo thinkstation P520c Firmware
Lenovo thinkstation P520c
Lenovo thinkstation P720
Lenovo thinkstation P720 Firmware

Information

Published : 2019-06-13 16:29

Updated : 2023-12-10 12:59


NVD link : CVE-2019-0130

Mitre link : CVE-2019-0130

CVE.ORG link : CVE-2019-0130


JSON object : View

Products Affected

lenovo

  • thinkstation_p920
  • thinkstation_p520
  • thinkstation_p720
  • thinkstation_p920_firmware
  • thinkstation_p520c
  • thinkstation_p720_firmware
  • thinkstation_p520_firmware
  • thinkstation_p520c_firmware

intel

  • rapid_storage_technology_enterprise
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')