PowerSchool records
2 published records for vendor powerschool.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-532 Insertion of Sensitive Information into Log File1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2019-17396No exploit | In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be apowerschool · powerschool mobile · CWE-532 | Critical9.8 | — | 1.2% | Oct 15, 2019 |
22Monitor | CVE-2026-12425No exploit | Reflected / DOM cross-site scripting (XSS) in PowerSchool ERP / Employee Access Center 23.10powerschool · employee access center · CWE-79 | Medium5.7 | — | 0.1% | Jun 16, 2026 |
- CVE-2019-1739639Monitor
In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be a
CriticalCVSS 9.8No exploitEPSS 1%powerschool · powerschool mobileOct 15, 2019
- CVE-2026-1242522Monitor
Reflected / DOM cross-site scripting (XSS) in PowerSchool ERP / Employee Access Center 23.10
MediumCVSS 5.7No exploitEPSS 0%powerschool · employee access centerJun 16, 2026