CVE-2020-8340
Published Sep 15, 2020A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Management Module 2), prior to version 5.60, embedded Baseboard Ma…
Vendor/product archive
lenovo / flex_system_x240_m5 CVEs
Beta · best-effort6 CVEs tagged to lenovo / flex_system_x240_m5 — 1 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2019-6157
Published Apr 22, 2019In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the genera…
CVE-2018-9068
Published Jul 26, 2018The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected. This information is made available for d…
CVE-2017-3775
Published May 4, 2018Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2017-3774
Published Apr 19, 2018A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers…
CVE-2017-3744
Published Jun 20, 2017In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the serv…
Showing 1-6 of 6 CVEsPage 1 of 1