Log in Start free

Vanderbilt

Products

ProductCVEsExploitedLatest
REDCap6–Jan 10, 2025

Exploited and recent CVEs

  • CVE-2025-23110 Medium 6.1 An issue was discovered in REDCap 14.9.6. A Reflected cross-site scripting (XSS) vulnerability in the email-subject field exists while performing an upload of a CSV file containing a list of alert con 0.3%
  • CVE-2025-23113 Low 3.4 An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a CSV file containing a list of alert configuration. An attac 0.2%
  • CVE-2025-23112 Medium 6.1 An issue was discovered in REDCap 14.9.6. A stored cross-site scripting (XSS) vulnerability allows authenticated users to inject malicious scripts into the Survey field name of Survey. When a user rec 0.3%
  • CVE-2025-23111 Medium 4.7 An issue was discovered in REDCap 14.9.6. It allows HTML Injection via the Survey field name, exposing users to a redirection to a phishing website. An attacker can exploit this to trick the user that 0.3%
  • CVE-2024-56377 Medium 5.4 A stored cross-site scripting (XSS) vulnerability in survey titles of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the Survey Title field or Survey Instructions. When a us 0.4%
  • CVE-2024-56376 Medium 5.4 A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field. When a user click on the rec 0.4%