EclassCVEs & Vulnerabilities
3 CVEs affecting Eclass products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
eclass ip 3
CVE-2019-9885CRITICAL
eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter.
25 Jul 2019
9.8
CVSS
CVE-2019-9884CRITICAL
eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page.
25 Jul 2019
9.8
CVSS
CVE-2019-9886HIGH
Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1.
11 Jul 2019
7.5
CVSS
← PrevPage 1 / 1Next →