Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2018-9066

In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additional parameters into a specific web API call which can result in privileged command execution within LXCA's underlying operating system.

  • Published: Jul 30, 2018
  • Updated: Nov 9, 2025
  • CVE: CVE-2018-9066
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9
  • AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs: