cbcvebase.
CVE-2023-3113
published 2023-06-26

CVE-2023-3113: An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could result in read-only…

high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could result in read-only access to specific files.

Affected

2 ranges
VendorProductVersion rangeFixed in
lenovolenovo_xclarity_administrator——
lenovoxclarity_administrator< 4.0.04.0.0