PatchTheCVEpearson vulnerabilities
Recent CVEs affecting pearson products. 5 tracked.
pearson has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-01-04. Highest priority: CVE-2014-1455 (score 44/100).
- CVE-2020-36154 HIGH 7.8 DOWNGRADE The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the
- CVE-2015-0972 MEDIUM 5.0 UPGRADE Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installatio
- CVE-2014-1942 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Info
- CVE-2014-1455 HIGH 7.5 UPGRADE SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information
- CVE-2014-1454 MEDIUM 4.8 MITIGATE Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation o
FAQ
How do I fix pearson vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pearson being exploited right now?
None of the tracked pearson CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pearson CVE should I patch first?
CVE-2014-1455 currently ranks highest (44/100): SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information.