https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-39196.htmlhttps://patchthecve.com/cve/CVE-2022-39196.htmlWed, 17 Jun 2026 04:57:53 +0000MEDIUM 6.5: Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced.https://patchthecve.com/cve/CVE-2021-36747.htmlhttps://patchthecve.com/cve/CVE-2021-36747.htmlWed, 17 Jun 2026 03:59:06 +0000MEDIUM 5.4: Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.https://patchthecve.com/cve/CVE-2021-36746.htmlhttps://patchthecve.com/cve/CVE-2021-36746.htmlWed, 17 Jun 2026 03:59:06 +0000MEDIUM 5.4: Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.