EUVD-2020-29207

Malware in sbrugna...

CVE-2020-8340

CVE-2020-8340 is an XSS vulnerability in legacy IBM/Lenovo System x IMM2 (BMC web interface) prior to firmware 5.60. Exploitation requires convincing the user to visit a crafted URL while the user is authenticated; the injected JavaScript executes in the user’s browser, not on IMM2. Documented im...

PT-2020-20107

Name of the Vulnerable Software and Affected Versions IBM and Lenovo System x IMM2 versions prior to 5.60 Description A cross-site scripting XSS issue was found in the legacy IBM and Lenovo System x IMM2 embedded Baseboard Management Controller BMC web interface. This could allow JavaScript code ...

CVE-2020-8340: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 Integrated Management Module 2, prior to version 5.60, embedded Baseboard Management Controller BMC web interface during an internal security review. This vulnerability could allow JavaScript code t...

Privilege Escalation and Denial of Service Vulnerabilities in System X IMM2

...