CVE-2020-8340

🗓️ 15 Sep 2020 14:20:17Reported by lenovoType

A cross-site scripting vulnerability in IBM and Lenovo System x IMM2 prior to v5.60 allows execution of JavaScript via crafted URL

Reporter	Title	Published	Views	Family All 7
CNVD	IBM BladeCenter Cross-Site Request Forgery Vulnerability	14 Sep 202000:00	–	cnvd
Cvelist	CVE-2020-8340	15 Sep 202014:20	–	cvelist
EUVD	EUVD-2020-29207	7 Oct 202500:30	–	euvd
Lenovo	XSS Vulnerability in Legacy System x IMM2 - Lenovo Support US	6 Sep 202019:37	–	lenovo
Lenovo	XSS Vulnerability in Legacy System x IMM2 - Lenovo Support US	6 Sep 202019:37	–	lenovo
NVD	CVE-2020-8340	15 Sep 202015:15	–	nvd
Prion	Cross site scripting	15 Sep 202015:15	–	prion

NVD

Vulners

Node

lenovo integrated_management_module_2Range<5.60

AND

lenovo flex_system_nx360_m5Match-

lenovo flex_system_x240Match-

lenovo flex_system_x280_x6Match-

lenovo flex_system_x3250_m6Match-

lenovo flex_system_x3500_m5Match-

lenovo flex_system_x3550_m5Match-

lenovo flex_system_x3650_m5Match-

lenovo flex_system_x3750_m4Match-

lenovo flex_system_x3850_x6Match-

lenovo flex_system_x3950_x6Match-

lenovo flex_system_x440Match-

lenovo flex_system_x480_x6Match-

lenovo flex_system_x880_x6Match-

Node

lenovo integrated_management_module_2Range<5.61

AND

lenovo flex_system_x240_m5Match-

[
  {
    "product": "System x IMM2 firmware for: x240, Machine Types: 7162, 2588;  x440, Machine Type 7167, 2590 ; x3750 M4, Machine Type: 8753 ;  x3250 M6, Machine type 3633, 3943 ; nx360 M5, Machine type 5465, 5467 ;  x280/x480/x880 X6 , Machine Type 7196, 4258 ; x3850 X6 and x3950 X6, Machine type 6241    ; x3550 M5, Machine Type 5463, 8869 ; x3650 M5, Machine Type 5462, 8871; x3500 M5, Machine Type 5464, 5478",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "5.60",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "System x IMM2 firmware for x240 M5, Machine Types: 9532, 2591",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "5.61",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "System x IMM2 firmware",
    "vendor": "IBM",
    "versions": [
      {
        "lessThan": "5.60",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-44717

21 Nov 2024 05:38Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

CVSS 3.16.1 - 6.3

EPSS0.00245

CWE-79