CVE-2026-6881
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
In the Giving Reports functionality in Ellucian Advance Web and Legacy Advance, a SQL injection vulnerability allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field.
Risk Assessment
An authenticated attacker can access confidential data in the database, compromising confidentiality.
Recommendation
Apply appropriate patches or updates provided by Ellucian.
Original NVD description (English source)
A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field. This issue affects Advance Web: all versions; Legacy Advance: all versions. Ellucian CRM Advance is not impacted.