Advisories · Technology
Lenovo XClarity Controller (XCC).
Every CVE that names Lenovo XClarity Controller (XCC) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.1 Medium
SQL injection in Lenovo XClarity Controller (XCC)
- Lenovo XClarity Controller (XCC)
- SQL injection
- CVSS 7.5 High
Improper privilege management in Lenovo XClarity Controller (XCC)
- Lenovo XClarity Controller (XCC)
- Privilege escalation
- CVSS 8.1 High
Missing authorization in Lenovo XClarity Controller (XCC)
- Lenovo XClarity Controller (XCC)
- Broken access control
- CVSS 4.3 Medium
Incorrect authorization in Lenovo XClarity Controller (XCC)
- Lenovo XClarity Controller (XCC)
- Broken access control
- CVSS 4.5 Medium
Cleartext transmission of sensitive information in Lenovo XClarity Controller (XCC)
- Lenovo XClarity Controller (XCC)
- Weak cryptography or TLS
- CVSS 4.8 Medium
Lenovo XClarity Controller (XCC): An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08…
- Lenovo XClarity Controller (XCC)
- CWE-264
-
Lenovo XClarity Controller (XCC): A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC)…
- Lenovo XClarity Controller (XCC)