Skip to content
Noroxi

pearson records

5 published records for vendor pearson.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2020-36154
    31Monitor

    The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" d

    HighCVSS 7.8No exploitEPSS 0%

    pearson · vue testing systemJan 4, 2021

  • CVE-2014-1455
    30Monitor

    SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and

    HighCVSS 7.5No exploitEPSS 1%

    pearson · esis enterprise student information systemApr 10, 2014

  • CVE-2015-0972
    20Monitor

    Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attack

    MediumCVSS 5.0No exploitEPSS 1%

    pearson · proctorcacheJun 23, 2015

  • CVE-2014-1454
    19Monitor

    Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user input

    MediumCVSS 4.8No exploitEPSS 1%

    pearson · esis enterprise student information systemJan 8, 2020

  • CVE-2014-1942
    17Monitor

    Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote a

    MediumCVSS 4.3No exploitEPSS 1%

    pearson · esis enterprise student information systemApr 1, 2014