Blackboard
26 CVEs across 11 Blackboard products. Browse Blackboard vulnerabilities, severities, and proof-of-concept exploits.
Blackboard products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39196 | Medium | 6.5 | 2022-09-05 | Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps… |
CVE-2021-36747 | Medium | 5.4 | 2021-07-20 | Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form. |
CVE-2021-36746 | Medium | 5.4 | 2021-07-20 | Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor. |
CVE-2020-25902 | Medium | 6.1 | 2021-03-02 | Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execute on the class room, which leads to st… |
CVE-2020-9008 | Medium | 5.4 | 2020-02-25 | Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the Peop… |
CVE-2018-13257 | Medium | 6.1 | 2019-11-18 | The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Ser… |
CVE-2017-18262 | Medium | 6.1 | 2018-04-30 | Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth lo… |
CVE-2014-0811 | | 2014-02-22 | Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecif… | |
CVE-2010-3245 | | 2010-09-07 | The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2) database password… | |
CVE-2010-3244 | | 2010-09-07 | BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determining whether it is a… | |
CVE-2008-3421 | | 2008-07-31 | Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of studen… | |
CVE-2008-1883 | | 2008-04-18 | The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to acc… | |
CVE-2008-1795 | | 2008-04-15 | Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inj… | |
CVE-2007-5227 | | 2007-10-05 | Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Ac… | |
CVE-2006-4308 | | 2006-08-23 | Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vi… | |
CVE-2006-3914 | | 2006-07-28 | Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypa… | |
CVE-2006-0511 | | 2006-02-01 | Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users… | |
CVE-2005-4341 | | 2005-12-19 | Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all availabl… | |
CVE-2005-4339 | | 2005-12-19 | Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6… | |
CVE-2005-4338 | | 2005-12-19 | announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t… | |
CVE-2005-4337 | | 2005-12-19 | The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to… | |
CVE-2005-4206 | Medium | 6.1 | 2005-12-13 | Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to… |
CVE-2004-1581 | | 2004-12-31 | BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which… | |
CVE-2002-1007 | | 2002-10-04 | Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login… | |
CVE-2000-0627 | | 2000-07-18 | BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by direc… | |
CVE-2000-0605 | | 2000-07-10 | Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to a… |