Skip to content
Noroxi

blackboard records

26 published records for vendor blackboard.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

26 records
  • CVE-2005-4338
    41Plan

    announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows

    CriticalCVSS 10.0No exploitEPSS 2%

    blackboard · academic suiteDec 18, 2005

  • CVE-2002-1007
    31Monitor

    Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter

    HighCVSS 7.5Proof of conceptEPSS 2%

    blackboard · blackboardOct 4, 2002

  • CVE-2005-4337
    30Monitor

    The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows

    HighCVSS 7.5No exploitEPSS 1%

    blackboard · academic suiteDec 18, 2005

  • CVE-2000-0627
    30Monitor

    BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain

    HighCVSS 7.5No exploitEPSS 1%

    blackboard · courseinfoJul 18, 2000

  • CVE-2008-1883
    27Monitor

    The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remo

    MediumCVSS 6.8No exploitEPSS 1%

    blackboard · blackboard academic suiteApr 18, 2008

  • CVE-2022-39196
    26Monitor

    Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visitin

    MediumCVSS 6.5Proof of conceptEPSS 1%

    blackboard · blackboard learnSep 4, 2022

  • CVE-2005-4206
    25Monitor

    Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t

    MediumCVSS 6.1Proof of conceptEPSS 2%

    blackboard · academic suiteDec 13, 2005

  • CVE-2017-18262
    24Monitor

    Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for han

    MediumCVSS 6.1No exploitEPSS 1%

    blackboard · blackboard learnApr 30, 2018

  • CVE-2018-13257
    24Monitor

    The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central

    MediumCVSS 6.1Proof of conceptEPSS 1%

    blackboard · blackboard learnNov 18, 2019

  • CVE-2006-3914
    24Monitor

    Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or

    MediumCVSS 6.0No exploitEPSS 1%

    blackboard · blackboard academic suiteJul 27, 2006

  • CVE-2020-25902
    24Monitor

    Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability.

    MediumCVSS 6.1No exploitEPSS 0%

    blackboard · collaborate ultraMar 2, 2021

  • CVE-2021-36747
    21Monitor

    Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    blackboard · blackboard learnJul 20, 2021

  • CVE-2020-9008
    21Monitor

    Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile

    MediumCVSS 5.4Proof of conceptEPSS 0%

    blackboard · blackboard learnFeb 25, 2020

  • CVE-2021-36746
    21Monitor

    Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.

    MediumCVSS 5.4No exploitEPSS 0%

    blackboard · blackboard learnJul 20, 2021

  • CVE-2005-4341
    20Monitor

    Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t

    MediumCVSS 5.0No exploitEPSS 1%

    blackboard · academic suiteDec 18, 2005

  • CVE-2004-1581
    20Monitor

    BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3)

    MediumCVSS 5.0No exploitEPSS 1%

    blackboard · blackboardDec 31, 2004

  • CVE-2006-4308
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23

    MediumCVSS 4.3Proof of conceptEPSS 2%

    blackboard · blackboardAug 23, 2006

  • CVE-2008-1795
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remo

    MediumCVSS 4.3Proof of conceptEPSS 1%

    blackboard · academic suiteApr 15, 2008

  • CVE-2014-0811
    18Monitor

    Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script o

    MediumCVSS 4.3No exploitEPSS 1%

    blackboard · vista\/ceFeb 22, 2014

  • CVE-2010-3244
    18Monitor

    BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determin

    MediumCVSS 4.6No exploitEPSS 0%

    blackboard · transact suiteSep 7, 2010

  • CVE-2007-5227
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earli

    MediumCVSS 4.3No exploitEPSS 1%

    blackboard · blackboard learning and community post systemsOct 5, 2007

  • CVE-2005-4339
    17Monitor

    Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other

    MediumCVSS 4.3No exploitEPSS 0%

    blackboard · academic suiteDec 18, 2005

  • CVE-2008-3421
    17Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authe

    MediumCVSS 4.3No exploitEPSS 0%

    blackboard · blackboard academic suiteJul 31, 2008

  • CVE-2006-0511
    17Monitor

    Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allow

    MediumCVSS 4.3No exploitEPSS 0%

    blackboard · blackboardFeb 1, 2006

  • CVE-2010-3245
    8Monitor

    The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2

    LowCVSS 2.1No exploitEPSS 0%

    blackboard · transact suiteSep 7, 2010