Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 38

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00206 Published 2025-07-17 Fixed in 10.2501.20.0, 20.2506.39.0 CWE-88
Priority LOW 36

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00206 Published 2025-07-17 Fixed in 10.2501.20.0, 20.2506.39.0 CWE-88
TI-2025-05636 CVE-2025-6230 · GHSA-8mmv-gmgr-3x92

SQL injection in Lenovo Vantage

Priority LOW 23

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00171 Published 2025-07-17 Fixed in 10.2501.20.0, 20.2506.39.0 CWE-89