ILIAS 7.1

CPE Details

ILIAS 7.1
ilias
ilias
7.1
2021-06-04
16h00 +00:00
2021-06-10
13h28 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ilias:ilias:7.1:*:*:*:*:*:*:*

Informations

Vendor

ilias

Product

ilias

Version

7.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-33527 2024-05-21 15h01 +00:00 A Stored Cross-site Scripting (XSS) vulnerability in the "Import of Users and login name of user" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload.
5.4
Moyen
CVE-2024-33526 2024-05-21 14h52 +00:00 A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title of user role" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload.
7.1
Haute
CVE-2024-33529 2024-05-21 14h46 +00:00 ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to execute operating system commands via file uploads with dangerous types.
7.2
Haute
CVE-2024-33528 2024-05-21 14h44 +00:00 A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with tutor privileges to inject arbitrary web script or HTML via XML file upload.
4.7
Moyen
CVE-2023-36485 2023-12-24 23h00 +00:00 The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file.
7.2
Haute
CVE-2023-36486 2023-12-24 23h00 +00:00 The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename.
7.2
Haute
CVE-2023-36487 2023-06-28 22h00 +00:00 The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.
9.8
Critique
CVE-2022-45915 2022-12-07 00h00 +00:00 ILIAS before 7.16 allows OS Command Injection.
8.8
Haute
CVE-2022-45916 2022-12-07 00h00 +00:00 ILIAS before 7.16 allows XSS.
5.4
Moyen
CVE-2022-45917 2022-12-07 00h00 +00:00 ILIAS before 7.16 has an Open Redirect.
6.1
Moyen
CVE-2022-45918 2022-12-06 23h00 +00:00 ILIAS before 7.16 allows External Control of File Name or Path.
6.5
Moyen
CVE-2022-31266 2022-06-28 22h46 +00:00 In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.
4.3
Moyen
Les informations affichées sur CVE Find proviennent de plusieurs sources de référence rigoureusement sélectionnées. Les données CVE sont fournies par MITRE Corporation et la National Vulnerability Database (NVD). Le catalogue des vulnérabilités activement exploitées (KEV) provient de la Cybersecurity and Infrastructure Security Agency (CISA), tandis que les scores EPSS sont issus de FIRST.org. Enfin, les données relatives aux faiblesses logicielles (CWE) et aux schémas d'attaque courants (CAPEC) sont maintenues par MITRE Corporation, et les informations sur les configurations logicielles et matérielles (CPE) proviennent du NVD.