sakailms records
4 published records for vendor sakailms.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-285 Improper Authorization1
- CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2024-47876No exploit | Sakai: Kernel users created with type roleview can login as a normal usersakailms · sakai · CWE-285 | High8.7 | — | 0.5% | Oct 15, 2024 |
24Monitor | CVE-2019-16148No exploit | Sakai through 12.6 allows XSS via a chat user name.sakailms · sakai · CWE-79 | Medium6.1 | — | 0.8% | Sep 9, 2019 |
23Monitor | CVE-2025-62710No exploit | Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImplsakailms · sakai · CWE-337 | Medium5.9 | — | 0.2% | Oct 22, 2025 |
5Monitor | CVE-2026-33402No exploit | SAK-52311: Sakai site-manage group titles can contain XSS contentsakailms · sakai · CWE-79 | Low1.3 | — | 0.2% | Mar 26, 2026 |
- CVE-2024-4787634Monitor
Sakai: Kernel users created with type roleview can login as a normal user
HighCVSS 8.7No exploitEPSS 0%sakailms · sakaiOct 15, 2024
- CVE-2019-1614824Monitor
Sakai through 12.6 allows XSS via a chat user name.
MediumCVSS 6.1No exploitEPSS 0%sakailms · sakaiSep 9, 2019
- CVE-2025-6271023Monitor
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
MediumCVSS 5.9No exploitEPSS 0%sakailms · sakaiOct 22, 2025
- CVE-2026-334025Monitor
SAK-52311: Sakai site-manage group titles can contain XSS content
LowCVSS 1.3No exploitEPSS 0%sakailms · sakaiMar 26, 2026