Lenovo Xclarity Integrator vulnerabilities

4 vulnerabilities

Known vulnerabilities in Lenovo Xclarity Integrator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2018-16097lenovolxci for microsoft system center+2
EPSS score
0.45%
LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.6.5CVE-2018-16093lenovolxci for vmware+1
EPSS score
0.73%
In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file.6.5CVE-2018-9072lenovolxci for vmware+1
EPSS score
0.86%
In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads.7.5CVE-2019-6179lenovoxclarity_administrator+4
EPSS score
1.36%
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.