https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T17:41:58.400139+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-6881 CVE-2026-6881 — Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy Adv… 2026-10-02T17:41:58.401967+00:00

Affected: Ellucian Advance Web, Ellucian Legacy Advance

A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field.

This issue affects Advance Web: all versions; Legacy Advance: all versions.

Ellucian CRM Advance is not impacted.