← Back

Esis Enterprise Student Information System

esis_enterprise_student_information_system

Vendor: Pearson • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-1454
1Pearson
1Esis Enterprise Student Information System
Nov 21, 2024
Jan 8, 2020
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user input
CVE-2014-1455
1Pearson
1Esis Enterprise Student Information System
May 6, 2026
Apr 10, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new...Show more
SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new password.Show less
CVE-2014-1942
1Pearson
1Esis Enterprise Student Information System
May 6, 2026
Apr 2, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.