CVE-2023-4608
An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers w…
Published: 2023-10-24 · CVSS: 4.1 · CVSS 3.1
An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7