CVE-2026-6881

Vulnerability Description

A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field.

This issue affects Advance Web: all versions; Legacy Advance: all versions.

Ellucian CRM Advance is not impacted.

Vulnerability Details

Published Date

July 28, 2026

Last Modified

July 28, 2026

CWE ID

CWE-89

Source

NVD

External References

https://labs.sra.io/posts/ellucian

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment