Lenovo Commercial Vantage — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo Commercial Vantage, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-6231 — CVSS 7.8 (high): An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute…
• CVE-2025-6232 — CVSS 7.8 (high): An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute…
• CVE-2025-6230 — CVSS 5.3 (medium): A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and…