Blackboard

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Blackboard records in CISA KEV

No Blackboard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Academic Suite 6 records MEDIUM Blackboard Learn 6 records LOW Blackboard 4 records LOW Blackboard Academic Suite 4 records LOW Courseinfo 2 records LOW Transact Suite 2 records LOW Blackboard Learning And Community Portal Suite 1 record LOW Blackboard Learning And Community Post Systems 1 record LOW

Records

4 records in Blackboard Academic Suite · all components

TI-2008-01808 CVE-2008-1883 · GHSA-8hc3-wrhh-6crh

The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided…

LOW 33

The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01264 Published 2008-04-18 No fix listed CWE-287

TI-2006-03790 CVE-2006-3914 · GHSA-wxv2-v8vx-f2j4

Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows…

LOW 29

Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript whe…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.0112 Published 2006-07-28 No fix listed

TI-2008-03282 CVE-2008-3421 · GHSA-r2q3-fwwf-666h

Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite…

LOW 21

Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollment…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0053 Published 2008-07-31 No fix listed CWE-352

TI-2006-00497 CVE-2006-0511 · GHSA-xwp8-fr9p-xj9v

Blackboard Academic Suite 6.0 and earlier does not properly clear session information…

LOW 20

Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges.

CVSS 2.0MEDIUM 4.3 Local Low privileges Interaction — EPSS 0.00364 Published 2006-02-01 No fix listed

Open these records in search →

Critical	1
High	3
Medium	20
Low	2
No CVSS	0