← Back

Pearson

pearson

5 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Esis Enterprise Student Information System
esis_enterprise_student_information_system
3 CVEs
Proctorcache
proctorcache
1 CVE
Vue Testing System
vue_testing_system
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36154
1Pearson
1Vue Testing System
Nov 21, 2024
Jan 4, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Tro...Show more
The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application.Show less
CVE-2014-1454
1Pearson
1Esis Enterprise Student Information System
Nov 21, 2024
Jan 8, 2020
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user input
CVE-2015-0972
1Pearson
1Proctorcache
May 6, 2026
Jun 23, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a denial of service (test disruption) by le...Show more
Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a denial of service (test disruption) by leveraging knowledge of this password.Show less
CVE-2014-1455
1Pearson
1Esis Enterprise Student Information System
May 6, 2026
Apr 10, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new...Show more
SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new password.Show less
CVE-2014-1942
1Pearson
1Esis Enterprise Student Information System
May 6, 2026
Apr 2, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.