blackboard kayıtları
blackboard üreticisine ait 26 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
26 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2005-4338İstismar yok | announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allowsblackboard · academic suite | Kritik10,0 | — | %2,7 | 18 Ara 2005 |
31İzleyin | CVE-2002-1007Kavram kanıtı | Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter blackboard · blackboard | Yüksek7,5 | — | %2,8 | 4 Eki 2002 |
30İzleyin | CVE-2005-4337İstismar yok | The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows blackboard · academic suite | Yüksek7,5 | — | %1,5 | 18 Ara 2005 |
30İzleyin | CVE-2000-0627İstismar yok | BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain blackboard · courseinfo | Yüksek7,5 | — | %1,5 | 18 Tem 2000 |
27İzleyin | CVE-2008-1883İstismar yok | The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remoblackboard · blackboard academic suite · CWE-287 | Orta6,8 | — | %1,3 | 18 Nis 2008 |
26İzleyin | CVE-2022-39196Kavram kanıtı | Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visitinblackboard · blackboard learn | Orta6,5 | — | %1,4 | 4 Eyl 2022 |
25İzleyin | CVE-2005-4206Kavram kanıtı | Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers tblackboard · academic suite · CWE-601 | Orta6,1 | — | %2,1 | 13 Ara 2005 |
24İzleyin | CVE-2017-18262İstismar yok | Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for hanblackboard · blackboard learn · CWE-20 | Orta6,1 | — | %1,4 | 30 Nis 2018 |
24İzleyin | CVE-2018-13257Kavram kanıtı | The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Centralblackboard · blackboard learn · CWE-601 | Orta6,1 | — | %1,2 | 18 Kas 2019 |
24İzleyin | CVE-2006-3914İstismar yok | Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML orblackboard · blackboard academic suite | Orta6,0 | — | %1,1 | 27 Tem 2006 |
24İzleyin | CVE-2020-25902İstismar yok | Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability.blackboard · collaborate ultra · CWE-79 | Orta6,1 | — | %0,7 | 2 Mar 2021 |
21İzleyin | CVE-2021-36747Kavram kanıtı | Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.blackboard · blackboard learn · CWE-79 | Orta5,4 | — | %0,6 | 20 Tem 2021 |
21İzleyin | CVE-2020-9008Kavram kanıtı | Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tileblackboard · blackboard learn · CWE-79 | Orta5,4 | — | %0,6 | 25 Şub 2020 |
21İzleyin | CVE-2021-36746İstismar yok | Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.blackboard · blackboard learn · CWE-79 | Orta5,4 | — | %0,6 | 20 Tem 2021 |
20İzleyin | CVE-2005-4341İstismar yok | Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers tblackboard · academic suite | Orta5,0 | — | %1,2 | 18 Ara 2005 |
20İzleyin | CVE-2004-1581İstismar yok | BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3)blackboard · blackboard | Orta5,0 | — | %1,2 | 31 Ara 2004 |
18İzleyin | CVE-2006-4308Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23blackboard · blackboard · CWE-79 | Orta4,3 | — | %2,0 | 23 Ağu 2006 |
18İzleyin | CVE-2008-1795Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remoblackboard · academic suite · CWE-79 | Orta4,3 | — | %1,9 | 15 Nis 2008 |
18İzleyin | CVE-2014-0811İstismar yok | Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script oblackboard · vista\/ce · CWE-79 | Orta4,3 | — | %1,8 | 22 Şub 2014 |
18İzleyin | CVE-2010-3244İstismar yok | BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determinblackboard · transact suite · CWE-200 | Orta4,6 | — | %0,3 | 7 Eyl 2010 |
17İzleyin | CVE-2007-5227İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earliblackboard · blackboard learning and community post systems · CWE-79 | Orta4,3 | — | %1,1 | 5 Eki 2007 |
17İzleyin | CVE-2005-4339İstismar yok | Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and otherblackboard · academic suite | Orta4,3 | — | %0,9 | 18 Ara 2005 |
17İzleyin | CVE-2008-3421İstismar yok | Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the autheblackboard · blackboard academic suite · CWE-352 | Orta4,3 | — | %0,5 | 31 Tem 2008 |
17İzleyin | CVE-2006-0511İstismar yok | Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allowblackboard · blackboard | Orta4,3 | — | %0,4 | 1 Şub 2006 |
8İzleyin | CVE-2010-3245İstismar yok | The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2blackboard · transact suite · CWE-200 | Düşük2,1 | — | %0,9 | 7 Eyl 2010 |
- CVE-2005-433841Planlayın
announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows
KritikCVSS 10,0İstismar yokEPSS %3blackboard · academic suite18 Ara 2005
- CVE-2002-100731İzleyin
Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter
YüksekCVSS 7,5Kavram kanıtıEPSS %3blackboard · blackboard4 Eki 2002
- CVE-2005-433730İzleyin
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows
YüksekCVSS 7,5İstismar yokEPSS %2blackboard · academic suite18 Ara 2005
- CVE-2000-062730İzleyin
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain
YüksekCVSS 7,5İstismar yokEPSS %1blackboard · courseinfo18 Tem 2000
- CVE-2008-188327İzleyin
The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remo
OrtaCVSS 6,8İstismar yokEPSS %1blackboard · blackboard academic suite18 Nis 2008
- CVE-2022-3919626İzleyin
Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visitin
OrtaCVSS 6,5Kavram kanıtıEPSS %1blackboard · blackboard learn4 Eyl 2022
- CVE-2005-420625İzleyin
Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t
OrtaCVSS 6,1Kavram kanıtıEPSS %2blackboard · academic suite13 Ara 2005
- CVE-2017-1826224İzleyin
Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for han
OrtaCVSS 6,1İstismar yokEPSS %1blackboard · blackboard learn30 Nis 2018
- CVE-2018-1325724İzleyin
The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central
OrtaCVSS 6,1Kavram kanıtıEPSS %1blackboard · blackboard learn18 Kas 2019
- CVE-2006-391424İzleyin
Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or
OrtaCVSS 6,0İstismar yokEPSS %1blackboard · blackboard academic suite27 Tem 2006
- CVE-2020-2590224İzleyin
Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability.
OrtaCVSS 6,1İstismar yokEPSS %1blackboard · collaborate ultra2 Mar 2021
- CVE-2021-3674721İzleyin
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.
OrtaCVSS 5,4Kavram kanıtıEPSS %1blackboard · blackboard learn20 Tem 2021
- CVE-2020-900821İzleyin
Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile
OrtaCVSS 5,4Kavram kanıtıEPSS %1blackboard · blackboard learn25 Şub 2020
- CVE-2021-3674621İzleyin
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.
OrtaCVSS 5,4İstismar yokEPSS %1blackboard · blackboard learn20 Tem 2021
- CVE-2005-434120İzleyin
Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t
OrtaCVSS 5,0İstismar yokEPSS %1blackboard · academic suite18 Ara 2005
- CVE-2004-158120İzleyin
BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3)
OrtaCVSS 5,0İstismar yokEPSS %1blackboard · blackboard31 Ara 2004
- CVE-2006-430818İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23
OrtaCVSS 4,3Kavram kanıtıEPSS %2blackboard · blackboard23 Ağu 2006
- CVE-2008-179518İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remo
OrtaCVSS 4,3Kavram kanıtıEPSS %2blackboard · academic suite15 Nis 2008
- CVE-2014-081118İzleyin
Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script o
OrtaCVSS 4,3İstismar yokEPSS %2blackboard · vista\/ce22 Şub 2014
- CVE-2010-324418İzleyin
BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determin
OrtaCVSS 4,6İstismar yokEPSS %0blackboard · transact suite7 Eyl 2010
- CVE-2007-522717İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earli
OrtaCVSS 4,3İstismar yokEPSS %1blackboard · blackboard learning and community post systems5 Eki 2007
- CVE-2005-433917İzleyin
Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other
OrtaCVSS 4,3İstismar yokEPSS %1blackboard · academic suite18 Ara 2005
- CVE-2008-342117İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authe
OrtaCVSS 4,3İstismar yokEPSS %1blackboard · blackboard academic suite31 Tem 2008
- CVE-2006-051117İzleyin
Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allow
OrtaCVSS 4,3İstismar yokEPSS %0blackboard · blackboard1 Şub 2006
- CVE-2010-32458İzleyin
The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2
DüşükCVSS 2,1İstismar yokEPSS %1blackboard · transact suite7 Eyl 2010