8.2
High
CVE-2023-3113 An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM)…
Description
An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could result in read-only access to specific files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo XClarity Administrator | Versions not published |
Other CVEs of Lenovo XClarity Administrator
The 6 CVEs of Lenovo XClarity Administrator →
CVE-2023-34422
A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a…
6.5
Medium
CVE-2023-34421
A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a…
6.5
Medium
CVE-2023-34420
A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted…
7.2
High
CVE-2023-34418
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due…
8.1
High