CVE-2019-0130

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.4 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
intelrapid_storage_technology_enterprise
𝑥
< 5.5.0.2015
lenovothinkstation_p520_firmware
-
lenovothinkstation_p520c_firmware
-
lenovothinkstation_p720_firmware
-
lenovothinkstation_p920_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/108775
https://support.lenovo.com/us/en/product_security/LEN-27843
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html
http://www.securityfocus.com/bid/108775
https://support.lenovo.com/us/en/product_security/LEN-27843
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html