CVE-2026-6881 in Advance Webinformación

Resumen

por MITRE • 2026-07-29

A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field.



This issue affects Advance Web: all versions; Legacy Advance: all versions.



Ellucian CRM Advance is not impacted.

Once again VulDB remains the best source for vulnerability data.

Responsable

SRA

Reservar

2026-04-22

Divulgación

2026-07-29

Moderación

aceptado

Artículo

VDB-384004

CPE

listo

EPSS

0.00000

KEV

no

Actividades

medio

Fuentes

Might our Artificial Intelligence support you?

Check our Alexa App!