August 7, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-6230NVD

Vulnerability Summary

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.
Severity Level
MEDIUM(4.8)
Published Date
Jul 17, 2025
Last Modified
Aug 19, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-89: SQL Injection ↗
Improper neutralization of special elements used in an SQL command, allowing attackers to modify queries.
CVSS v4.0 Base Metrics
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone

External References