CVEInsight.

Free vulnerability intelligence for developers, security teams, and researchers. Data sourced from public databases for informational purposes only.

Explore

Legal

CVE data sourced from NVD / NIST & public disclosures.

lenovo

xclarity_integrator

4 known vulnerabilities · sorted by CVSS score

CVE-2019-6179

HIGH7.5

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.

lenovo / xclarity_administrator+2

Network

Published Sep 3, 2019

CVE-2018-9072

MEDIUM6.5

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads.

lenovo / xclarity_integrator

Network

Published Nov 30, 2018

CVE-2018-16097

MEDIUM6.5

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.

lenovo / xclarity_integrator+1

Network

Published Nov 30, 2018

CVE-2018-16093

MEDIUM6.5

In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file.

lenovo / xclarity_integrator

Network

Published Nov 30, 2018