CVE-2019-0130

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.
Configurations

Configuration 1 (hide)

cpe:2.3:a:intel:rapid_storage_technology_enterprise:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:lenovo:thinkstation_p520_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p520:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:lenovo:thinkstation_p520c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p520c:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:lenovo:thinkstation_p720_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p720:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:lenovo:thinkstation_p920_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:16

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/108775 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/108775 - Broken Link, Third Party Advisory, VDB Entry
References () https://support.lenovo.com/us/en/product_security/LEN-27843 - Third Party Advisory () https://support.lenovo.com/us/en/product_security/LEN-27843 - Third Party Advisory
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html - Patch, Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html - Patch, Vendor Advisory

Information

Published : 2019-06-13 16:29

Updated : 2024-11-21 04:16


NVD link : CVE-2019-0130

Mitre link : CVE-2019-0130

CVE.ORG link : CVE-2019-0130


JSON object : View

Products Affected

intel

  • rapid_storage_technology_enterprise

lenovo

  • thinkstation_p720_firmware
  • thinkstation_p920_firmware
  • thinkstation_p920
  • thinkstation_p520c
  • thinkstation_p520c_firmware
  • thinkstation_p520_firmware
  • thinkstation_p520
  • thinkstation_p720
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')