[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy4_htJAtpoOP5qGCPrT3NwJBMdjnkRHfBTLnfPa-tr4":3,"g5a-ex:lenovo\u002Fxclarity_administrator@*":162,"g5a-family:lenovo\u002Fxclarity_administrator":164},{"success":4,"data":5},true,{"product":6,"versions":57,"topVulnerabilitiesByEpss":78,"kevVulnerabilities":139,"seoMetadata":140,"meta":159},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":56},"lenovo","xclarity_administrator",20,27,0,"2024-09-13",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,50,52,54],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.1",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.3",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.1",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.1",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.2",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.2",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.0",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.0",{"version":48,"cve_count":49,"kev_count":11,"has_kev":16},"2.6.0",1,{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.6",{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.0","Xclarity Administrator by Lenovo is a technology product with 20 tracked versions and 27 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":49,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},[79,87,94,101,108,114,119,124,129,133],{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":84,"severity":85,"isKev":16,"epssScore":86},"CVE-2017-17833","OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.","2018-04-23",9.8,"v3.0","Critical",0.03759,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":84,"severity":92,"isKev":16,"epssScore":93},"CVE-2018-9066","In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additional parameters into a specific web API call which can result in privileged command execution within LXCA's underlying operating system.","2018-07-30",8.8,"High",0.02244,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":84,"severity":99,"isKev":16,"epssScore":100},"CVE-2019-6158","An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x.","2019-05-03",5.9,"Medium",0.01474,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":106,"severity":92,"isKev":16,"epssScore":107},"CVE-2019-6179","An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.","2019-09-03",7.5,"v3.1",0.01358,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":112,"cvssVersion":106,"severity":92,"isKev":16,"epssScore":113},"CVE-2023-34420","A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.","2023-06-26",7.2,0.01338,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":83,"cvssVersion":84,"severity":85,"isKev":16,"epssScore":118},"CVE-2016-8233","Log files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user.","2017-03-01",0.01141,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":105,"cvssVersion":106,"severity":92,"isKev":16,"epssScore":123},"CVE-2019-6193","An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes.","2020-02-14",0.01033,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":91,"cvssVersion":84,"severity":92,"isKev":16,"epssScore":128},"CVE-2017-3770","Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.","2017-09-22",0.01015,{"cveId":130,"description":131,"publishedDate":90,"cvssScore":91,"cvssVersion":84,"severity":92,"isKev":16,"epssScore":132},"CVE-2018-9064","In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user.",0.00961,{"cveId":134,"description":135,"publishedDate":136,"cvssScore":137,"cvssVersion":84,"severity":99,"isKev":16,"epssScore":138},"CVE-2017-3764","A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed.","2017-11-30",5.3,0.00891,[],{"title":141,"metaDescription":142,"keywords":143,"structuredData":144},"Xclarity Administrator by Lenovo - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Xclarity Administrator by Lenovo covering 20 versions with 27 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Xclarity Administrator vulnerabilities, Xclarity Administrator security, Xclarity Administrator CVE, Lenovo Xclarity Administrator, Xclarity Administrator threat intelligence, Lenovo security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":145,"@type":146,"name":147,"description":142,"url":148,"manufacturer":149,"applicationCategory":153,"softwareVersion":154,"mainEntity":155},"https:\u002F\u002Fschema.org","SoftwareApplication","Xclarity Administrator","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Flenovo\u002Fxclarity_administrator",{"@type":150,"name":151,"url":152},"Organization","Lenovo","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flenovo","Security Software","20 versions tracked",{"@type":156,"name":157,"description":158,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Xclarity Administrator Security Vulnerabilities","Security vulnerabilities affecting Xclarity Administrator by Lenovo",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":160,"apiVersion":161},"2026-10-19T16:18:20.342Z","3.0",{"rows":163,"total":11,"capped":16,"failed":11},[],[]]