Lenovo vulnerabilities
401 CVEs and advisories name Lenovo as an affected vendor, newest first. Follow it as a feed.
- CVE-2019-6187A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriat
- CVE-2019-6186A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated use
- CVE-2019-6184A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escala
- CVE-2019-6176A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service.
- CVE-2019-6188ThinkPad T460p and T470p BIOS Tamper Mechanism
- CVE-2019-6172A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some
- CVE-2019-6170A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some
- CVE-2019-6161An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB (Storage Block) BMC
- CVE-2019-6175System Update Vulnerability
- CVE-2019-6182A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an admini
- CVE-2019-6181A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could
- CVE-2019-6180A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could al
- CVE-2019-6179An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo X
- CVE-2019-6177A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to n
- CVE-2019-6171A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or ph
- CVE-2019-6165A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation.
- CVE-2019-6169A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.
- CVE-2019-6168A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
- CVE-2019-6167A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
- CVE-2019-6166A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.
- CVE-2019-6163A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be wri
- CVE-2019-6158An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in
- CVE-2019-6157In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the
- CVE-2019-6156In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash.
- CVE-2019-6154A DLL search path vulnerability was reported in Lenovo Bootable Generator, prior to version Mar-2019, that could allow a malicious user with
- CVE-2018-9072LXCI for VMware
- CVE-2018-16097LXCI for VMware and LXCI for Microsoft System Center
- CVE-2018-16093LXCI for VMware
- CVE-2018-9084System Management Module Vulnerabilities
- CVE-2018-9083System Management Module Vulnerabilities