Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-6230 EUVD-2025-21803GHSA-8mmv-gmgr-3x92

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and exec…

Published Jul 17, 2025 · Updated Aug 18, 2025 · Assigned by lenovo

Vendor: Lenovo Product: Commercial Vantage Product: Vantage

Description

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.

Affected products

VendorProductAffectedFixed
Lenovo Vantage < 10.2501.20.0 10.2501.20.0
Lenovo Commercial Vantage < 20.2506.39.0 20.2506.39.0

References