CVE-2023-25492

No fix known EPSS <1%CVSS 6.3

A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API.

Published 2023-05-01 · CVE record · OSV

Products: Lenovo XClarity Controller