Skip to content
OpenAdvisories

Vendor

Ellucian

5 known vulnerabilities.

Products

Banner Self-Service 2 Advance Web 1 Legacy Advance 1 Ethos Identity 1 WebAdvisor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-109430

    Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection

    Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution.…

    Ellucian WebAdvisor