XClarity Controller at a glance
- Last 12 months
- 1
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 1 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Latest advisories
-
Medium max 7.3WID-SEC-2023-0928 3 CVEs
Lenovo XClarity Controller: Mehrere Schwachstellen
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Lenovo XClarity Controller ausnutzen, um Sicherheitsvorkehrungen zu umgehen und seine Rechte zu erweitern.
12 results · Feed
-
High 7.1
An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 (XCC3) versio…
-
High 7.2
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated pri…
-
High 7.2
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an au…
-
High 7.2
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an auth…
-
High 7.2
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated pri…
-
High 7.2
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC …
-
High 8.3
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API c…
-
Medium 6.3
A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined…
-
Medium 4.9
A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password …
-
Medium 5.3
A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be…
-
High 7.3
A valid XCC user's local account permissions overrides their active directory permissions under specific configurations…
-
Medium 6.4
A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the …