Integrated Management Module 2

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-15	CVE-2020-8340	Cross-site Scripting vulnerability in Lenovo Integrated Management Module 2 A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Management Module 2), prior to version 5.60, embedded Baseboard Management Controller (BMC) web interface during an internal security review. network low complexity lenovo CWE-79	6.1
2018-04-19	CVE-2017-3774	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Lenovo Integrated Management Module 2 4.70 A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. network low complexity lenovo CWE-119 critical	9.8