CVE-2020-8348: Lenovo Enterprise Network Disk

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's current browser session if a crafted url is visited, possibly through phishing.

Affected products

• Lenovo Enterprise Network Disk: version 6.1 only

Published 2020-09-24. Last modified 2026-06-17.