CVE-2023-34418: Lenovo Xclarity Administrator

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.

Affected products

• Lenovo Xclarity Administrator: before 4.0.0 (fixed in 4.0.0)

Published 2023-06-26. Last modified 2026-06-17.