OP
Vendor
OpenOLAT
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-28228 | OP OpenOLAT OpenOLAT | 8.8 | Mar 30 | OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution |
| CVE-2026-31946 | OP OpenOLAT OpenOLAT | 9.8 | Mar 30 | OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow |
| CVE-2024-28198 | OP OpenOLAT OpenOLAT | 7.5 | Mar 11 | XML external entity (XXE) injection in OpenOLAT |