Vulnerability Details CVE-2025-6230
A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 5.0%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2025-6230
-
cpe:2.3:a:lenovo:commercial_vantage:*
-
cpe:2.3:a:lenovo:vantage:10.2001.12.0
-
cpe:2.3:a:lenovo:vantage:10.2003.10.0
-
cpe:2.3:a:lenovo:vantage:10.2209.2.0
-
cpe:2.3:a:lenovo:vantage:10.2210.45.0
-
cpe:2.3:a:lenovo:vantage:10.2210.54.0
-
cpe:2.3:a:lenovo:vantage:10.2210.56.0
-
cpe:2.3:a:lenovo:vantage:10.2301.8.0
-
cpe:2.3:a:lenovo:vantage:10.2303.112.0
-
cpe:2.3:a:lenovo:vantage:10.2304.15.0
-
cpe:2.3:a:lenovo:vantage:10.2305.16.0
-
cpe:2.3:a:lenovo:vantage:10.2305.6.0
-
cpe:2.3:a:lenovo:vantage:10.2307.14.0
-
cpe:2.3:a:lenovo:vantage:10.2308.29.0
-
cpe:2.3:a:lenovo:vantage:10.2310.18.0
-
cpe:2.3:a:lenovo:vantage:10.2312.17.0
-
cpe:2.3:a:lenovo:vantage:10.2401.24.0
-
cpe:2.3:a:lenovo:vantage:10.2403.29.0
-
cpe:2.3:a:lenovo:vantage:10.2406.37.0
-
cpe:2.3:a:lenovo:vantage:10.2409.30.0
-
cpe:2.3:a:lenovo:vantage:10.2411.26.0
-
cpe:2.3:a:lenovo:vantage:4.0.49.0