Ellucian Advance Web vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ellucian Advance Web: 1 record(s), with affected versions and fixes.

CVE-2026-6881 Critical · 9.4 CWE-89 Jul 28, 2026

Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy Advance

A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field. This issue affects Advance Web: all versions; Legacy Advance: all versions. Ellucian CRM Advance is not impacted.