CVE-2022-39196

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p71

Published

Sep 5, 2022 (Sep 5, 2022)

Modified

Jun 17, 2026

Description

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced.

Vendors: blackboard
Products: blackboard learn
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.