Skip to content
OpenAdvisories

Vendor

Lenovo

474 known vulnerabilities.

Products

BIOS 32 Desktop BIOS 16 Vantage 15 PC Manager 15 XClarity Controller 12 App Store 11 Printers 11 Service Bridge 10 ThinkPad BIOS 10 XClarity Administrator (LXCA) 9 Lenovo XClarity Administrator 9 PCManager 9 XClarity Administrator 9 ThinkSystem SMM 9 Iomega StorCenter 9 LenovoEMC 9 EZ Media and Backup Center 9 Browser 7 ThinkPad 6 Baiying 5 System Update 5 HX5530 Appliance (ThinkAgile) XCC 5 HX7530 Appliance (ThinkAgile) XCC 5 ST250 V3 (ThinkSystem) XCC 5 VX3331 Certified Node (ThinkAgile) XCC 5 HX Enclosure Certified Node (ThinkAgile) XCC 5 HX1021 Edge Certified Node 3yr (ThinkAgile) XCC 5 HX1320 Appliance (ThinkAgile) XCC 5 HX1321 Certified Node (ThinkAgile) XCC 5 HX1331 Certified Node (ThinkAgile) XCC 5 HX1520-R Appliance (ThinkAgile) XCC 5 HX1521-R Certified Node (ThinkAgile) XCC 5 HX2320-E Appliance (ThinkAgile) XCC 5 HX2321 Certified Node (ThinkAgile) XCC 5 HX2330 Appliance (ThinkAgile) XCC 5 HX2331 Certified Node (ThinkAgile) XCC 5 HX2720-E Appliance (ThinkAgile) XCC 5 HX3320 Appliance (ThinkAgile) XCC 5 HX3321 Certified Node (ThinkAgile) XCC 5 Idea Tab Pro (TB373FU) 5
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.9
    CVE-2026-16791

    Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI

    A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed wi…

    Lenovo XClarity Essentials OneCLI
  • Low 2.8
    CVE-2026-0520

    A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could al…

    Lenovo FileZ
  • Low 3.2
    CVE-2025-14058

    A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized u…

    Lenovo Idea Tab Pro (TB373FU) Yoga Tab Plus (TB520FU) Tab M10 5G (TB360ZU)
  • Low 3.1
    CVE-2025-6026

    An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could al…

    Lenovo Universal Device Client
  • Low 2.8
    CVE-2024-4786

    An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted applicatio…

    Lenovo Tab K10
  • Low 2.0
    CVE-2024-23591

    ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode whic…

    Lenovo ThinkSystem SR670 V2
  • Low 3.3
    CVE-2023-5081

    An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to ga…

    Lenovo Tablet
  • Low 2.7
    CVE-2022-34888

    The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal servic…

    Lenovo Lenovo XClarity Controller
  • Low 2.4
    CVE-2020-8352

    In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration chan…

    Lenovo BIOS