Записи blackboard
26 опубликованных записей вендора blackboard.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 1
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
26 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
41В плане | CVE-2005-4338Эксплойта нет | announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allowsblackboard · academic suite | Критическая10,0 | — | 2,7 % | 18 дек. 2005 г. |
31Наблюдать | CVE-2002-1007Proof of concept | Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter blackboard · blackboard | Высокая7,5 | — | 2,7 % | 4 окт. 2002 г. |
30Наблюдать | CVE-2005-4337Эксплойта нет | The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows blackboard · academic suite | Высокая7,5 | — | 1,5 % | 18 дек. 2005 г. |
30Наблюдать | CVE-2000-0627Эксплойта нет | BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain blackboard · courseinfo | Высокая7,5 | — | 1,4 % | 18 июл. 2000 г. |
27Наблюдать | CVE-2008-1883Эксплойта нет | The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remoblackboard · blackboard academic suite · CWE-287 | Средняя6,8 | — | 1,2 % | 18 апр. 2008 г. |
26Наблюдать | CVE-2022-39196Proof of concept | Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visitinblackboard · blackboard learn | Средняя6,5 | — | 1,4 % | 4 сент. 2022 г. |
25Наблюдать | CVE-2005-4206Proof of concept | Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers tblackboard · academic suite · CWE-601 | Средняя6,1 | — | 2,0 % | 13 дек. 2005 г. |
24Наблюдать | CVE-2017-18262Эксплойта нет | Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for hanblackboard · blackboard learn · CWE-20 | Средняя6,1 | — | 1,3 % | 30 апр. 2018 г. |
24Наблюдать | CVE-2018-13257Proof of concept | The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Centralblackboard · blackboard learn · CWE-601 | Средняя6,1 | — | 1,2 % | 18 нояб. 2019 г. |
24Наблюдать | CVE-2006-3914Эксплойта нет | Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML orblackboard · blackboard academic suite | Средняя6,0 | — | 1,1 % | 27 июл. 2006 г. |
24Наблюдать | CVE-2020-25902Эксплойта нет | Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability.blackboard · collaborate ultra · CWE-79 | Средняя6,1 | — | 0,6 % | 2 мар. 2021 г. |
21Наблюдать | CVE-2021-36747Proof of concept | Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.blackboard · blackboard learn · CWE-79 | Средняя5,4 | — | 0,6 % | 20 июл. 2021 г. |
21Наблюдать | CVE-2020-9008Proof of concept | Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tileblackboard · blackboard learn · CWE-79 | Средняя5,4 | — | 0,6 % | 25 февр. 2020 г. |
21Наблюдать | CVE-2021-36746Эксплойта нет | Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.blackboard · blackboard learn · CWE-79 | Средняя5,4 | — | 0,5 % | 20 июл. 2021 г. |
20Наблюдать | CVE-2005-4341Эксплойта нет | Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers tblackboard · academic suite | Средняя5,0 | — | 1,1 % | 18 дек. 2005 г. |
20Наблюдать | CVE-2004-1581Эксплойта нет | BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3)blackboard · blackboard | Средняя5,0 | — | 1,1 % | 31 дек. 2004 г. |
18Наблюдать | CVE-2006-4308Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23blackboard · blackboard · CWE-79 | Средняя4,3 | — | 2,0 % | 23 авг. 2006 г. |
18Наблюдать | CVE-2008-1795Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remoblackboard · academic suite · CWE-79 | Средняя4,3 | — | 1,9 % | 15 апр. 2008 г. |
18Наблюдать | CVE-2014-0811Эксплойта нет | Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script oblackboard · vista\/ce · CWE-79 | Средняя4,3 | — | 1,7 % | 22 февр. 2014 г. |
18Наблюдать | CVE-2010-3244Эксплойта нет | BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determinblackboard · transact suite · CWE-200 | Средняя4,6 | — | 0,3 % | 7 сент. 2010 г. |
17Наблюдать | CVE-2007-5227Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earliblackboard · blackboard learning and community post systems · CWE-79 | Средняя4,3 | — | 1,0 % | 5 окт. 2007 г. |
17Наблюдать | CVE-2005-4339Эксплойта нет | Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and otherblackboard · academic suite | Средняя4,3 | — | 0,9 % | 18 дек. 2005 г. |
17Наблюдать | CVE-2008-3421Эксплойта нет | Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the autheblackboard · blackboard academic suite · CWE-352 | Средняя4,3 | — | 0,5 % | 31 июл. 2008 г. |
17Наблюдать | CVE-2006-0511Эксплойта нет | Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allowblackboard · blackboard | Средняя4,3 | — | 0,3 % | 1 февр. 2006 г. |
8Наблюдать | CVE-2010-3245Эксплойта нет | The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2blackboard · transact suite · CWE-200 | Низкая2,1 | — | 0,8 % | 7 сент. 2010 г. |
- CVE-2005-433841В плане
announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %blackboard · academic suite18 дек. 2005 г.
- CVE-2002-100731Наблюдать
Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %blackboard · blackboard4 окт. 2002 г.
- CVE-2005-433730Наблюдать
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %blackboard · academic suite18 дек. 2005 г.
- CVE-2000-062730Наблюдать
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %blackboard · courseinfo18 июл. 2000 г.
- CVE-2008-188327Наблюдать
The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remo
СредняяCVSS 6,8Эксплойта нетEPSS 1 %blackboard · blackboard academic suite18 апр. 2008 г.
- CVE-2022-3919626Наблюдать
Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visitin
СредняяCVSS 6,5Proof of conceptEPSS 1 %blackboard · blackboard learn4 сент. 2022 г.
- CVE-2005-420625Наблюдать
Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t
СредняяCVSS 6,1Proof of conceptEPSS 2 %blackboard · academic suite13 дек. 2005 г.
- CVE-2017-1826224Наблюдать
Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for han
СредняяCVSS 6,1Эксплойта нетEPSS 1 %blackboard · blackboard learn30 апр. 2018 г.
- CVE-2018-1325724Наблюдать
The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central
СредняяCVSS 6,1Proof of conceptEPSS 1 %blackboard · blackboard learn18 нояб. 2019 г.
- CVE-2006-391424Наблюдать
Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or
СредняяCVSS 6,0Эксплойта нетEPSS 1 %blackboard · blackboard academic suite27 июл. 2006 г.
- CVE-2020-2590224Наблюдать
Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability.
СредняяCVSS 6,1Эксплойта нетEPSS 0 %blackboard · collaborate ultra2 мар. 2021 г.
- CVE-2021-3674721Наблюдать
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.
СредняяCVSS 5,4Proof of conceptEPSS 0 %blackboard · blackboard learn20 июл. 2021 г.
- CVE-2020-900821Наблюдать
Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile
СредняяCVSS 5,4Proof of conceptEPSS 0 %blackboard · blackboard learn25 февр. 2020 г.
- CVE-2021-3674621Наблюдать
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.
СредняяCVSS 5,4Эксплойта нетEPSS 0 %blackboard · blackboard learn20 июл. 2021 г.
- CVE-2005-434120Наблюдать
Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t
СредняяCVSS 5,0Эксплойта нетEPSS 1 %blackboard · academic suite18 дек. 2005 г.
- CVE-2004-158120Наблюдать
BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3)
СредняяCVSS 5,0Эксплойта нетEPSS 1 %blackboard · blackboard31 дек. 2004 г.
- CVE-2006-430818Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23
СредняяCVSS 4,3Proof of conceptEPSS 2 %blackboard · blackboard23 авг. 2006 г.
- CVE-2008-179518Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remo
СредняяCVSS 4,3Proof of conceptEPSS 1 %blackboard · academic suite15 апр. 2008 г.
- CVE-2014-081118Наблюдать
Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script o
СредняяCVSS 4,3Эксплойта нетEPSS 1 %blackboard · vista\/ce22 февр. 2014 г.
- CVE-2010-324418Наблюдать
BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determin
СредняяCVSS 4,6Эксплойта нетEPSS 0 %blackboard · transact suite7 сент. 2010 г.
- CVE-2007-522717Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earli
СредняяCVSS 4,3Эксплойта нетEPSS 1 %blackboard · blackboard learning and community post systems5 окт. 2007 г.
- CVE-2005-433917Наблюдать
Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other
СредняяCVSS 4,3Эксплойта нетEPSS 0 %blackboard · academic suite18 дек. 2005 г.
- CVE-2008-342117Наблюдать
Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authe
СредняяCVSS 4,3Эксплойта нетEPSS 0 %blackboard · blackboard academic suite31 июл. 2008 г.
- CVE-2006-051117Наблюдать
Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allow
СредняяCVSS 4,3Эксплойта нетEPSS 0 %blackboard · blackboard1 февр. 2006 г.
- CVE-2010-32458Наблюдать
The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2
НизкаяCVSS 2,1Эксплойта нетEPSS 0 %blackboard · transact suite7 сент. 2010 г.