Browse CVEs

MEDIUM 6.5 CVE-2022-39196 Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certa… Blackboard Learn No fix yet Fix from $1,6002022-09-05 MEDIUM 5.4 CVE-2021-36746 Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor. Blackboard Learn after 9.1 Fix from $1,6002021-07-20 MEDIUM 5.4 CVE-2021-36747 Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form. Blackboard Learn after 9.1 Fix from $1,6002021-07-20 MEDIUM 6.1 CVE-2020-25902 Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execute on the class room, which l… Collaborate Ultra Mitigation only Fix from $1,6002021-03-02 MEDIUM 5.4 CVE-2020-9008 Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget i… Blackboard Learn 9.1+ Fix from $1,6002020-02-25 MEDIUM 6.1 CVE-2018-13257 The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authenti… Blackboard Learn No fix yet Fix from $1,6002019-11-18 MEDIUM 6.1 CVE-2017-18262 Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shi… Blackboard Learn after 9.1 Fix from $1,6002018-04-30 MEDIUM 6.8 CVE-2008-1883 The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attack… Blackboard Academic Suite after 7 Fix from $1,6002008-04-18 MEDIUM 6.0 CVE-2006-3914 Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web scri… Blackboard Academic Suite Mitigation only Fix from $1,6002006-07-28 HIGH 10.0 CVE-2005-4338 announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote a… Academic Suite No fix yet Fix from $1,9502005-12-19 HIGH 7.5 CVE-2005-4337 The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote at… Academic Suite No fix yet Fix from $1,9502005-12-19 MEDIUM 5.0 CVE-2005-4341 Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list al… Academic Suite Mitigation only Fix from $1,6002005-12-19 MEDIUM 6.1 CVE-2005-4206 Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirec… Academic Suite after 6.0.0.0 Fix from $1,6002005-12-13 MEDIUM 5.0 CVE-2004-1581 BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.p… Blackboard Mitigation only Fix from $1,6002004-12-31 HIGH 7.5 CVE-2002-1007 Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link… Blackboard No fix yet Fix from $1,9502002-10-04 HIGH 7.5 CVE-2000-0627 BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privilege… Courseinfo Patch available Fix from $1,9502000-07-18