CVE:CVE-2019-6159
CNNVD:CNNVD-201908-602
IBM System x IMM (IMM v1)中的embedded Baseboard Management Controller (BMC)存在跨站脚本漏洞。攻击者可利用该漏洞执行JavaScript代码。以下产品及版本受到影响：BladeCenter HS22；BladeCenter HS22V；BladeCenter HX5；System x iDataPlex dx360 M2；System x iDataPlex dx360 M3；System x3400 M3 System x3500 M2；System x3500 M3；System x3550 M3；System x3560 M2；System x3630 M3；System x3650 M3；System x3690 X5；System x3850 X5；System x3950 X5。
solution:Upgrade lenovo bladecenter_hs22_firmware to a higher version than -; Upgrade lenovo bladecenter_hs22v_firmware to a higher version than -; Upgrade lenovo bladecenter_hx5_firmware to a higher version than -; Upgrade lenovo system_x_idataplex_dx360_m2_firmware to a higher version than -; Upgrade lenovo system_x_idataplex_dx360_m3_firmware to a higher version than -; Upgrade lenovo system_x3400_m3_firmware to a higher version than -; Upgrade lenovo system_x3500_m2_firmware to a higher version than -; Upgrade lenovo system_x3500_m3_firmware to a higher version than -; Upgrade lenovo system_x3550_m3_firmware to a higher version than -; Upgrade lenovo system_x3560_m2_firmware to a higher version than -; Upgrade lenovo system_x3630_m3_firmware to a higher version than -; Upgrade lenovo system_x3650_m3_firmware to a higher version than -; Upgrade lenovo system_x3690_x5_firmware to a higher version than -; Upgrade lenovo system_x3850_x5_firmware to a higher version than -; Upgrade lenovo system_x3950_x5_firmware to a higher version than -