Skip to content
OpenAdvisories

Vendor

Ellucian

5 known vulnerabilities.

Products

Banner Self-Service 2 Advance Web 1 Legacy Advance 1 Ethos Identity 1 WebAdvisor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-6881

    Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy Advance

    A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field. This issue affects Advance Web: …

    Ellucian Legacy Advance Advance Web