Skip to content
OpenAdvisories

Vendor

Ellucian

5 known vulnerabilities.

Products

Banner Self-Service 2 Advance Web 1 Legacy Advance 1 Ethos Identity 1 WebAdvisor 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-47106

    Ellucian Banner Self-Service Stored XSS via getFacultyMeetingTimes API

    Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a stored cross-site scripting vulnerability in the course search functionality that allows authenticated Banner ERP users to inject malicious payloads into faculty and course field…

    Ellucian Banner Self-Service
  • Medium 6.1
    CVE-2026-32856

    Ellucian Banner Self-Service Reflected XSS via dateConverter

    Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting unsanitized input through th…

    Ellucian Banner Self-Service
  • Medium 4.3
    CVE-2023-2822 Public exploit Scanner template

    Ellucian Ethos Identity logout cross site scripting

    A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file /cas/logout. The manipulation of the argument url leads to cross site scripting. It is possible to launch the…

    Ellucian Ethos Identity