Blackboard Blackboard Learn
6 CVEs affecting Blackboard Blackboard Learn. Latest disclosed: 2022-09-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39196 | Medium | 6.5 | 2022-09-05 | Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps… |
CVE-2018-13257 | Medium | 6.1 | 2019-11-18 | The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Ser… |
CVE-2017-18262 | Medium | 6.1 | 2018-04-30 | Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth lo… |
CVE-2021-36747 | Medium | 5.4 | 2021-07-20 | Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form. |
CVE-2021-36746 | Medium | 5.4 | 2021-07-20 | Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor. |
CVE-2020-9008 | Medium | 5.4 | 2020-02-25 | Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the Peop… |