Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Ellucian Banner Self-Service April T2 Clear all filters
TI-2026-34704 CVE-2026-47106 · GHSA-pgpc-33v2-x2qg

Ellucian Banner Self-Service Stored XSS via getFacultyMeetingTimes API

Priority LOW 23

Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a stored cross-site scripting vulnerability in the course search functionality that allows authenticated Banner ERP users to inject malicious…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00196 Published 2026-06-09 Fixed in April T2 CWE-79
TI-2026-25318 CVE-2026-32856 · GHSA-x7x7-w9rf-g664

Ellucian Banner Self-Service Reflected XSS via dateConverter

Priority LOW 23

Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0022 Published 2026-06-09 Fixed in April T2 CWE-79