Lenovo XClarity Administrator vulnerabilities

2 known vulnerabilities in Lenovo XClarity Administrator from Lenovo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Lenovo XClarity Administrator: Improper Restriction of XML External Entity Reference

  CVE-2023-3113Jun 26, 2023Lenovo

  An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could result in read-only access to specific files.

• 8.1 High severity

  Lenovo XClarity Administrator: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-34418Jun 26, 2023Lenovo

  A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.