Edx

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Edx records in CISA KEV

No Edx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Edx-platform 12 records MEDIUM Open Edx 3 records LOW Open Edx Platform 3 records MEDIUM Configuration 1 record LOW Recommender 1 record LOW

Records

3 records in Open Edx · all components

TI-2015-02022 CVE-2015-2286 · GHSA-fgmr-7xcr-rjr8

lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not…

LOW 33

lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attackers to discover password-reset tokens by r…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02047 Published 2016-03-19 No fix listed CWE-200

TI-2022-13908 CVE-2022-32195 · GHSA-r5xm-9894-gpw6

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.

LOW 32

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02345 Published 2022-06-09 No fix listed CWE-79

TI-2019-14733 CVE-2019-20513 · GHSA-2q2x-qfwg-f3pw

Open edX Ironwood.1 allows support/certificates?user= reflected XSS.

LOW 28

Open edX Ironwood.1 allows support/certificates?user= reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0049 Published 2020-03-19 No fix listed CWE-79

Open these records in search →

Critical	0
High	8
Medium	11
Low	0
No CVSS	0