CVE-2023-25492 (published 2023-05-01T14:11:48.551Z)
A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API.
Affected products: Vendor: Lenovo
Product: XClarity Controller
Versions: See product security advisory below