Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Pearson Clear all filters
TI-2020-18474 CVE-2020-36154 · GHSA-762w-4wr8-9572

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control…

Priority LOW 34

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Tro…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00449 Published 2021-01-04 No fix listed CWE-732
TI-2015-00887 CVE-2015-0972 · GHSA-c3gx-j29w-p5pp

Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different…

Priority LOW 26

Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a denial of service (test disruption) by le…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01333 Published 2015-06-23 No fix listed CWE-255
TI-2014-01120 CVE-2014-1455 · GHSA-9cwm-xxr8-vw8q

SQL injection vulnerability in the password reset functionality in Pearson eSIS…

Priority LOW 35

SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01302 Published 2014-04-10 No fix listed CWE-89