Ellucian

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ellucian records in CISA KEV

No Ellucian vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Banner Student 4 records MEDIUM Banner 1 record MEDIUM Banner Enterprise Identity Services 1 record MEDIUM Banner Web Tailor 1 record MEDIUM Ethos Identity 1 record MEDIUM

Records

1 record in Banner · all components

TI-2023-26952 CVE-2023-49339 · GHSA-m839-rvvg-g25r

Ellucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified…

MEDIUM 62

Ellucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified bannerId to the /StudentSelfService/ssb/studentCard/retrieveData endpoint.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00589 Published 2024-02-13 No fix listed CWE-639

Open these records in search →

Critical	2
High	2
Medium	7
Low	0
No CVSS	0