Skip to content
OpenAdvisories

Product · Ellucian

WebAdvisor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-109430

    Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection

    Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution.…

    Ellucian WebAdvisor