Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductXclarity Administrator (115833de-9fac-5c78-9f07-103ae6f1f448)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45104 vulnerable 2026-06-08 06:45:54.597321 Details available
MEDIUM (6.3)
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.
Published: 2024-09-13T17:28:55.910Z
Updated: 2024-09-13T17:48:48.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45103 vulnerable 2026-06-08 06:45:54.596885 Details available
MEDIUM (4.3)
A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges.
Published: 2024-09-13T17:28:26.004Z
Updated: 2024-09-13T17:49:12.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45102 vulnerable 2026-06-08 06:45:54.596557 Details available
MEDIUM (6.8)
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On (SSO) provider for XCC instances.
Published: 2025-01-14T21:18:25.798Z
Updated: 2025-01-15T15:05:26.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45101 vulnerable 2026-06-08 06:45:54.596210 Details available
MEDIUM (6.8)
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince the user to click on a specially crafted URL.
Published: 2024-09-13T17:27:56.092Z
Updated: 2024-09-13T17:50:38.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4605 vulnerable 2026-06-08 06:16:13.548938 Details available
MEDIUM (6.5)
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve system event information.
Published: 2024-04-05T20:44:43.105Z
Updated: 2024-08-12T18:32:28.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3113 vulnerable 2026-06-08 06:09:38.584046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34422 vulnerable 2026-06-08 06:06:25.517908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34421 vulnerable 2026-06-08 06:06:25.517553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34420 vulnerable 2026-06-08 06:06:25.517036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34418 vulnerable 2026-06-08 06:06:25.476468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8355 vulnerable 2026-06-08 05:27:16.496131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6194 vulnerable 2026-06-08 05:14:10.298201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6193 vulnerable 2026-06-08 05:14:10.297787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6182 vulnerable 2026-06-08 05:14:09.942652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6181 vulnerable 2026-06-08 05:14:09.942125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6180 vulnerable 2026-06-08 05:14:09.941602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6179 vulnerable 2026-06-08 05:14:09.938593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6158 vulnerable 2026-06-08 05:14:09.147617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19757 vulnerable 2026-06-08 05:13:23.537786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9066 vulnerable 2026-06-08 05:12:07.537844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9065 vulnerable 2026-06-08 05:12:07.537520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9064 vulnerable 2026-06-08 05:12:07.536712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3770 vulnerable 2026-06-08 05:09:36.609053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3764 vulnerable 2026-06-08 05:09:36.519485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3763 vulnerable 2026-06-08 05:09:36.519076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3745 vulnerable 2026-06-08 05:09:36.238642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17833 vulnerable 2026-06-08 05:09:09.973161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8233 vulnerable 2026-06-08 05:08:14.008977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8221 vulnerable 2026-06-08 05:08:13.875409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.