8.2
Élevée
CVE-2023-3113 An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM)…
Description
An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could result in read-only access to specific files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Lenovo XClarity Administrator | Versions non publiées |
Autres CVE de Lenovo XClarity Administrator
Les 6 CVE de Lenovo XClarity Administrator →
CVE-2023-34422
A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a…
6.5
Moyenne
CVE-2023-34421
A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a…
6.5
Moyenne
CVE-2023-34420
A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted…
7.2
Élevée
CVE-2023-34418
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due…
8.1
Élevée