VULNERABILITY INTELLIGENCE
CVE-2026-6881
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-07-28
Last modified2026-09-09
Description
A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field. This issue affects Advance Web: all versions; Legacy Advance: all versions. Ellucian CRM Advance is not impacted.
Weakness classification
- 57dba5dd-1a03-47f6-8b36-e84e47d335d8: CWE-89