Lenovo Xclarity Administrator (Lenovo) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-06-26. Vendor: Lenovo.
CVEs of Lenovo Xclarity Administrator
- CVE-2023-34421 - CVSS 6.5 (medium), 2023-06-26: A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API call due to…
- CVE-2023-34420 - CVSS 7.2 (high), 2023-06-26: A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.
- CVE-2023-3113 - CVSS 8.2 (high), 2023-06-26: An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could result in read-only…
- CVE-2023-34418 - CVSS 8.1 (high), 2023-06-26: A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a…
- CVE-2023-34422 - CVSS 6.5 (medium), 2023-06-26: A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a specifically crafted web API call due…
- CVE-2019-6158 - CVSS 8.7 (high), 2019-05-03: An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This…
