← Vulnerability feed

Vulnerability record · CVE-2019-0130 · published 13 June 2019

CVE-2019-0130: Intel rapid storage technology enterprise cross-site scripting vulnerability

Intel · Rapid Storage Technology Enterprise

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.

7.4 CVSS 3.1 High EPSS 1.9% · top 21.2% CWE-79 · Cross-site scripting
7.4CVSS 3.1 base score, v2 4.3
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/108775 Broken LinkThird Party AdvisoryVDB Entry
https://support.lenovo.com/us/en/product_security/LEN-27843 Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html PatchVendor Advisory
http://www.securityfocus.com/bid/108775 Broken LinkThird Party AdvisoryVDB Entry
https://support.lenovo.com/us/en/product_security/LEN-27843 Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html PatchVendor Advisory

Track CVE-2019-0130 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2023-25492Lenovo thinkagile hx5530 firmware vulnerabilityA valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format str…EPSS 0.51%8.8CVE-2023-0683Lenovo thinkagile hx5530 firmware improper input validation vulnerabilityA valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.EPSS 0.57%8.8CVE-2023-29057Lenovo thinkagile hx5530 firmware incorrect default permissions vulnerabilityA valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privile…EPSS 0.50%7.8CVE-2022-48188Lenovo ideacentre aio 3 21itl7 firmware out-of-bounds write vulnerabilityA buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local ac…EPSS 0.19%7.8CVE-2019-0135Intel rapid storage technology enterprise permissions and access controls vulnerabilityImproper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated …EPSS 0.29%6.8CVE-2021-3519Lenovo ideacentre c5-14mb05 firmware improper authentication vulnerabilityA vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Dev…EPSS 0.24%6.7CVE-2021-4210Lenovo stadia ggp-120 firmware improper input validation vulnerabilityA potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow a…EPSS 0.26%6.5CVE-2023-29058Lenovo thinkagile hx5530 firmware incorrect default permissions vulnerabilityA valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through …EPSS 0.36%

Source: NIST National Vulnerability Database (record CVE-2019-0130), CISA KEV, FIRST EPSS (scores of 2026-10-16). This page is refreshed as NVD updates the record.