Login Request a demo
LX
Product
Lenovo XClarity Controller (XCC)
by Lenovo · last CVE Oct 24, 2023
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 3Medium 0Low 0
Severity
All severities3Critical0High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Lenovo XClarity Controller (XCC) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-4607
8.8
1%
Oct 24
An authenticated XCC user can change permissions for any user through a crafted API command
Affected: various
CVE-2023-4606
8.1
1%
Oct 24
An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.   This affects ThinkSystem v2 and v3 servers with XCC;…
Affected: various
CVE-2023-4608
7.2
0%
Oct 24
An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.  This affects ThinkSystem v2 and v3 servers…
Affected: various
Showing 3