esis enterprise student information system vulnerabilities and fixes

Recent CVEs affecting esis enterprise student information system, with upgrade or downgrade steps. 3 tracked.

Also searched as: esisenterprisestudentinformationsystem.

esis enterprise student information system has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-01-08. Highest priority: CVE-2014-1455 (score 44/100).

• CVE-2014-1942 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Info
• CVE-2014-1455 HIGH 7.5 UPGRADE SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information
• CVE-2014-1454 MEDIUM 4.8 MITIGATE Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation o

FAQ

How do I fix esis enterprise student information system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is esis enterprise student information system being exploited right now?

None of the tracked esis enterprise student information system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which esis enterprise student information system CVE should I patch first?

CVE-2014-1455 currently ranks highest (44/100): SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information.

RSS feed for esis enterprise student information system · ← Back to latest CVEs