A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.
2025-07-17T20:15:31.383
2025-08-19T16:32:52.043
Analyzed
CVSSv3.1: 5.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | lenovo | commercial_vantage | < 20.2506.39.0 | Yes |
| Application | lenovo | vantage | < 10.2501.20.0 | Yes |