medium6.1
CVE-2018-16096
In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML ta…
Impact
In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | System Management Module Firmware | before 1.06 |