Login Request a demo
IL
Vendor
Ilias
2 products with CVEs on record
45
CVEs
0
On KEV
0
New 30D
Products
IL
ILIAS
Ilias
9.8
44 CVEs0 on KEV0 new
LM
Learning Management System
ILIAS
4.7
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-32778
IL
ILIAS
ILIAS
3.3
0%
Sep 14An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1
CVE-2026-85135
IL
ILIAS
Ilias
6.3
0%
Sep 3ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload
CVE-2026-12789
LM
Learning Management System
ILIAS
4.7
0%
Jun 21ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection
CVE-2020-36944
IL
Ilias
Ilias
3.3
0%
Jan 28ILIAS Learning Management System 4.3 - SSRF
CVE-2025-11346
IL
ILIAS
Ilias
9.8
0%
Oct 6ILIAS Base64 Decoding unserialize deserialization
CVE-2025-11345
IL
ILIAS
Ilias
9.8
0%
Oct 6ILIAS Test Import unserialize deserialization
CVE-2025-11344
IL
ILIAS
Ilias
9.8
1%
Oct 6ILIAS Certificate Import code injection
CVE-2024-33527
IL
Ilias
Ilias
5.4
0%
May 21A Stored Cross-site Scripting (XSS) vulnerability in the "Import of Users and login name of user" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote…
CVE-2024-33526
IL
Ilias
Ilias
7.1
1%
May 21A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title of user role" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote…
CVE-2024-33529
IL
Ilias
Ilias
7.2
1%
May 21ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to execute operating system commands via file…
CVE-2024-33528
IL
Ilias
Ilias
4.7
0%
May 21A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with tutor privileges to inject arbitrary…
CVE-2023-36486
IL
Ilias
Ilias
7.2
1%
Dec 25The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by…
CVE-2023-36485
IL
Ilias
Ilias
7.2
1%
Dec 25The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via…
CVE-2023-45868
IL
Ilias
Ilias
8.1
1%
Oct 26The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user privileges) to achieve a high-impact Directory Traversal attack on confidentiality and…
CVE-2023-45869
IL
Ilias
Ilias
9.0
1%
Oct 26ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged account accesses an XSS payload
CVE-2023-45867
IL
Ilias
Ilias
6.5
1%
Oct 26ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion vulnerability in the ScormAicc module
CVE-2023-36488
IL
Ilias
Ilias
5.4
0%
Jun 29ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to stored Cross Site Scripting (XSS)
CVE-2023-36484
IL
Ilias
Ilias
6.1
0%
Jun 29ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS)
CVE-2023-36487
IL
Ilias
Ilias
9.8
1%
Jun 29The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account
CVE-2022-45915
IL
Ilias
Ilias
8.8
5%
Dec 7ILIAS before 7.16 allows OS Command Injection
CVE-2022-45916
IL
Ilias
Ilias
5.4
1%
Dec 7ILIAS before 7.16 allows XSS
CVE-2022-45917
IL
Ilias
Ilias
6.1
2%
Dec 7ILIAS before 7.16 has an Open Redirect
CVE-2022-45918
IL
Ilias
Ilias
6.5
1%
Dec 7ILIAS before 7.16 allows External Control of File Name or Path
CVE-2022-31266
IL
Ilias
Ilias
4.3
1%
Jun 29In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts
CVE-2020-23996
IL
Ilias
Ilias
8.8
2%
May 13A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to execute arbitrary code via the import of personal data
CVE-2020-23995
IL
Ilias
Ilias
6.5
2%
May 13An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to get the upload data path via a workspace upload
CVE-2020-25268
IL
Ilias
Ilias
8.8
2%
Nov 10Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data
CVE-2020-25267
IL
Ilias
Ilias
5.4
1%
Nov 10An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4
CVE-2019-1010237
IL
Ilias
Ilias
6.1
2%
Jul 22Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79 Type 2: Stored XSS (or Persistent)
CVE-2018-10428
IL
Ilias
Ilias
6.1
2%
May 23ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected…
CVE-2018-10307
IL
Ilias
Ilias
6.1
1%
May 18error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception
CVE-2018-10306
IL
Ilias
Ilias
6.1
1%
May 18Services/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class.ilDateTimeInputGUI.php in ILIAS 5.1.x through 5.3.x before 5.3.4 allow XSS via an invalid…
CVE-2018-11120
IL
Ilias
Ilias
6.1
1%
May 17Services/COPage/classes/class.ilPCSourceCode.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS
CVE-2018-11119
IL
Ilias
Ilias
6.1
1%
May 17ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via the return_to_url parameter
CVE-2018-11118
IL
Ilias
Ilias
6.1
1%
May 17The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php
CVE-2018-11117
IL
Ilias
Ilias
6.1
1%
May 17Services/Feeds/classes/class.ilExternalFeedItem.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a link attribute
CVE-2018-10665
IL
Ilias
Ilias
6.1
1%
May 2ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files
CVE-2018-5688
IL
Ilias
Ilias
6.1
3%
Jan 14ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in the Setup component
CVE-2017-15538
IL
Ilias
Ilias
5.4
1%
Oct 17Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator…
CVE-2017-7583
IL
Ilias
Ilias
6.1
1%
Apr 7ILIAS before 5.2.3 has XSS via SVG documents
CVE-2014-2090
IL
Ilias
Ilias
–
1%
Mar 2Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tar, (2)…
CVE-2014-2089
IL
Ilias
Ilias
–
2%
Mar 2ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain client_id pathname
CVE-2014-2088
IL
Ilias
Ilias
–
3%
Mar 2Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using a .php filename in an upload_files…
CVE-2008-5816
IL
Ilias
Ilias
–
1%
Jan 2SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ref_id parameter
CVE-2007-5806
IL
Ilias
Ilias
–
1%
Nov 5Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML…