Lenovo Commercial Vantage vulnerabilities

CVE-2025-6232 [HIGH] CWE-88 CVE-2025-6232: An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions co An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations.

CVE-2025-6231 [HIGH] CWE-88 CVE-2025-6231: An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions co An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file.

CVE-2025-6230 [MEDIUM] CWE-89 CVE-2025-6230: A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to mo A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.