RE
Product
REDCap
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 24Low 1
Watch
Add REDCap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-23113 | 8.8 | Jan 10 | An issue was discovered in REDCap 14.9.6 Affected: 14.9.6 |
| CVE-2024-56310 | 8.8 | Dec 22 | REDCap through 14.9.6 has a security flaw in the Project Dashboards name, exposing users to a Cross-Site Request Forgery (CSRF) attack Affected: through 14.9.6 |
| CVE-2024-56311 | 8.8 | Dec 22 | REDCap through 14.9.6 has a security flaw in the Notes section of calendar events, exposing users to a Cross-Site Request Forgery (CSRF) attack Affected: through 14.9.6 |
| CVE-2017-7351 | 8.8 | Feb 8 | A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload Affected: 7.0.0 before 7.0.11 |
| CVE-2017-10961 | 8.8 | Jul 18 | REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components Affected: through 7.5.0 |
| CVE-2019-14937 | 7.5 | Aug 17 | REDCap before 9.3.0 allows time-based SQL injection in the edit calendar event via the cal_id parameter, such as cal_id=55 and sleep(3) to Calendar/calendar_popup_ajax.php Affected: 8.11.5 before 9.3.0 |
Showing 6