Log in Start free

Ellucian

Products

ProductCVEsExploitedLatest
Banner Self-Service2–Jun 9, 2026
Advance Web1–Jul 28, 2026
Ethos Identity1–May 20, 2023
Legacy Advance1–Jul 28, 2026
WebAdvisor1–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-109430 High 7.5 Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection 0.3%
  • CVE-2026-6881 Critical 9.4 Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy Advance 0.3%
  • CVE-2026-6881 Critical 9.4 Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy Advance 0.3%
  • CVE-2026-47106 Medium 5.4 Ellucian Banner Self-Service Stored XSS via getFacultyMeetingTimes API 0.2%
  • CVE-2026-32856 Medium 6.1 Ellucian Banner Self-Service Reflected XSS via dateConverter 0.2%
  • CVE-2023-2822 Medium 4.3 Ellucian Ethos Identity logout cross site scripting 3.3%