CVE-2026-38671

Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service StudentRegistrationSsb 9.23 and prior no fixed version available allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint...

CVE-2026-38671

A Cross Site Scripting (XSS) vulnerability exists in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) versions 9.23 and prior . A remote attacker can exploit the mepCode parameter of the /ssb/registration endpoint to execute arbitrary code. The documents state that no fi...

EUVD-2026-104275

Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service StudentRegistrationSsb 9.23 and prior no fixed version available allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint...

CVE-2026-38671

Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service StudentRegistrationSsb 9.23 and prior no fixed version available allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint...

CVE-2026-38671

Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service StudentRegistrationSsb 9.23 and prior no fixed version available allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint...

Ellucian Banner Student User Enumeration Vulnerability

Ellucian formerly known as SunGard Banner Student is a set of student information management system of the American Ellucian Company. The system has functions such as grade release, student attendance and student information statistics. A security vulnerability exists in Ellucian Banner Student...

Ellucian Banner Student Arbitrary Password Reset Vulnerability

Ellucian formerly known as SunGard Banner Student is a set of student information management system of the American Ellucian Company. The system has functions such as grade release, student attendance and student information statistics. A security vulnerability exists in Ellucian Banner Student...

Ellucian Banner Student Cross-Site Scripting Vulnerability

Ellucian formerly known as SunGard Banner Student is a set of student information management system of the American Ellucian Company. The system has functions such as grade release, student attendance and student information statistics. A cross-site scripting vulnerability exists in Ellucian Bann...

Cross site scripting

Cross-site scripting XSS vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4687

Cross-site scripting XSS vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4689

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...

CVE-2015-5054

Open redirect vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter...

Code injection

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a series of requests...

Design/Logic Flaw

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...

CVE-2015-4687

Cross-site scripting XSS vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5054

Open redirect vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter...

CVE-2015-4688

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a series of requests...

CVE-2015-4689

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...

CVE-2015-4687

CVE-2015-4687 corresponds to a Cross-Site Scripting (XSS) vulnerability in Ellucian Banner Student (formerly SunGard) version 8.5.1.2. The linked sources confirm an XSS flaw that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available records do ...

CVE-2015-5054

The CVE-2015-5054 entry concerns an open redirect vulnerability in Ellucian Banner Student, version range 8.5.1.2 through 8.7. The issue is triggered by an attacker-supplied URL parameter that can redirect users to arbitrary external sites, enabling phishing. The connected documents confirm the p...