Login Request a demo
IL
Product
ILIAS
by Ilias · last CVE Sep 14, 2026
44
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities44In the news0Timeline
Severity mix
Critical 5High 8Medium 24Low 2
Severity
All severities44Critical5High8Medium24Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ILIAS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-45915
8.8
5%
Dec 7
ILIAS before 7.16 allows OS Command Injection
Affected: before 7.16
CVE-2020-23996
8.8
2%
May 13
A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to execute arbitrary code via the import of personal data
Affected: before 5.3.19; 5.4.0 before 5.4.10
CVE-2020-25268
8.8
2%
Nov 10
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data
Affected: 6.4.0
CVE-2023-45868
8.1
1%
Oct 26
The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user privileges) to achieve a high-impact Directory Traversal attack on confidentiality and…
Affected: 7.25
CVE-2024-33529
7.2
1%
May 21
ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to execute operating system commands via file…
Affected: 7.0 before 7.30; 8.0 before 8.11; 9.0
CVE-2023-36486
7.2
1%
Dec 25
The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by…
Affected: before 7.23; 8.0 before 8.3
CVE-2023-36485
7.2
1%
Dec 25
The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via…
Affected: before 7.23; 8.0 before 8.3
CVE-2024-33526
7.1
1%
May 21
A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title of user role" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote…
Affected: 7.0 before 7.30; 8.0 before 8.11
Showing 8