Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductXclarity Controller (c74692a7-604c-5b44-8c23-d508c39ea03f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38512 vulnerable 2026-06-08 06:41:47.556063 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-07-26T19:45:31.829Z
Updated: 2024-08-02T04:12:25.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38511 vulnerable 2026-06-08 06:41:47.550129 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-07-26T19:45:21.293Z
Updated: 2024-08-02T04:12:25.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38510 vulnerable 2026-06-08 06:41:47.534131 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-07-26T19:45:12.150Z
Updated: 2024-08-02T04:12:24.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38509 vulnerable 2026-06-08 06:41:47.527989 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
Published: 2024-07-26T19:45:01.471Z
Updated: 2024-08-02T04:12:24.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38508 vulnerable 2026-06-08 06:41:47.519835 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.
Published: 2024-07-26T19:44:50.100Z
Updated: 2024-08-02T04:12:25.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29058 vulnerable 2026-06-08 06:02:38.417365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29057 vulnerable 2026-06-08 06:02:38.392937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29056 vulnerable 2026-06-08 06:02:38.192554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25495 vulnerable 2026-06-08 05:56:09.052939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25492 vulnerable 2026-06-08 05:56:08.899364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0683 vulnerable 2026-06-08 05:52:32.263425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3956 vulnerable 2026-06-08 05:33:58.091025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6195 vulnerable 2026-06-08 05:14:10.300606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6187 vulnerable 2026-06-08 05:14:09.951462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.