XC
Product
XClarity Controller
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 7Low 0
Watch
Add XClarity Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-0683 | 8.8 | May 1 | A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call Affected: See product security advisory below |
| CVE-2023-25492 | 8.8 | May 1 | A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in… Affected: See product security advisory below |
| CVE-2023-29057 | 8.8 | Apr 28 | A valid XCC user's local account permissions overrides their active directory permissions under specific configurations Affected: Refer to Mitigation strategy section in LEN-118321 |
| CVE-2024-38512 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted… Affected: various |
| CVE-2024-38511 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform… Affected: various |
| CVE-2024-38510 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform… Affected: various |
| CVE-2024-38509 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted… Affected: various |
| CVE-2024-38508 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated… Affected: various |
Showing 8