Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-6230

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.

Description

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Vantage

Default version status: unaffected

  • 0 to < 10.2501.20.0affected

Lenovo Commercial Vantage

Default version status: unaffected

  • 0 to < 20.2506.39.0affected

References